Vadim Kurland
7f2dbe58e9
See #2367 upgraded all test files to the latest dtd v21
2011-05-06 16:07:55 -07:00
Vadim Kurland
b33cc80ad8
see #2367 rules with action Continue can be shadowed but can not shadow other rules
2011-05-06 16:07:17 -07:00
Vadim Kurland
1c5fbb98a5
fixed xslt script dtd20 -> dtd21 to handle pf_classify_terminating properly
2011-05-06 15:10:48 -07:00
Vadim Kurland
8773642198
see #2367 merge from development
2011-05-05 19:16:47 -07:00
Vadim Kurland
282102e03f
Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development
2011-05-05 18:50:59 -07:00
Vadim Kurland
e24a73a560
see #2385 "PF action Classify uses
...
wrong parameter". This change fixes a bug introduced in 4.2.0
that affects rules with action Classify in PF firewalls.
2011-05-05 18:50:32 -07:00
Theron Tock
4880424bf3
Fixes #2387 .
...
Check for null object in debug message so it doesn't cause crash.
2011-05-05 17:02:15 -07:00
Vadim Kurland
7232a2195b
see #2385 bumped XML DTD version to 21 to make room for the transformation to fix bug #2385 . That will be done in branch development
2011-05-05 12:01:18 -07:00
Vadim Kurland
c096684c20
see #2367 merged latest changes from development branch; this merged transformation for v18->v19 XML file upgrades; upgraded test files for PF
2011-05-04 16:44:08 -07:00
Theron Tock
71f5faab3d
Fixes #2379 .
...
It seems Qt gives wrong value for "visible" arg in visibilityChanged on Mac.
So we use the isVisible() function instead.
2011-05-04 16:09:56 -07:00
Vadim Kurland
afef4b39c1
bumped dtd version to 20 and renamed xslt upgrade script since dtd version increased to 19 in the development branch
2011-05-04 15:54:15 -07:00
Vadim Kurland
d14a984f85
* FWObjectDatabase_18.xslt: XSLT transformation to upgrade data
...
files from DTD v18 to DTD v19. This transformation finds
"PolicyRule" elements with missing "Itf" child elements and fixes
them by adding such element with a reference pointint to "any".
Fixes #2383
* fwbuilder.dtd.in: Element "Itf" (an interface) of "PolicyRule"
should be required. DTD version increment.
2011-05-04 15:23:46 -07:00
Vadim Kurland
49e65c2775
see #2367 upgraded unit test files and made sure tests pass. Some chain names have changed after this change but overall script structure has improved. Still need to add more tests for various combinations of Classify, Tag and Route options with different actions
2011-05-03 20:43:38 -07:00
Vadim Kurland
48e32aef5d
see #2367 fixed tag and negation combination for iptables; checking for broken tag configuration in rule set view
2011-05-03 16:32:48 -07:00
Vadim Kurland
c2d3ac5bc5
see #2367 auto-upgrade transformation for DTD 19
2011-05-03 16:04:36 -07:00
Vadim Kurland
6da4d79543
see #2367 auto-upgrade transformation for DTD 19
2011-05-03 15:58:58 -07:00
Vadim Kurland
a694b9a93d
merged latest changes from development branch
2011-05-03 11:48:20 -07:00
Vadim Kurland
cb09818f44
build 3536
2011-05-03 11:35:06 -07:00
Vadim Kurland
350c40030e
* newFirewallDialog.cpp (finishClicked): see #2380 "Firewall
...
object is created in the middle of the "new firewall" wizard and
clicking Back creates two firewall objects". If user chose to
create new firewall object from a template and clicked Back after
choosing the template, the program actually created two firewall
objects but only one was visible in the tree.
2011-05-03 11:28:13 -07:00
Vadim Kurland
13a897452d
* PolicyCompiler_ipt.cpp (processNext): see #2367 "Multiple
...
actions per policy rule". Options "Tag", "Classify" and "Route"
work with iptables in a combination with any action. This
implementation has one restriction: option Route can not be used
in combination with options Tag or Classify and any action that is
not Continue. This is because option Route can yield rules in
PREROUTING or POSTROUTING chains that are also used by options Tag
and Classify. For this combination we create two user-defined
chains that perform routing and tagging (or classification). In
case of a terminating action both chains end with it. This means
if one matches the packet, the other is never going to see it.
Non-terminating action "Continue" does not create this problem.
This limitation may be removed in future versions of fwbuilder.
2011-05-03 10:30:55 -07:00
Vadim Kurland
542c4b5eeb
Merge branch 'development' into multiple_actions
2011-05-02 20:49:45 -07:00
Vadim Kurland
64e860a025
see #2367 attempt at iptables support for tag, classify and route options
2011-05-02 18:50:03 -07:00
Theron Tock
75ea45a36b
Fixes #2374 .
...
Set the dock width to 0 if objectView is floated or hidden.
2011-05-02 15:45:46 -07:00
Vadim Kurland
3c276bc40b
see #2367 using QComboBox to choose between "none", "queue" and "pipe" for ipfw classification
2011-05-02 14:34:34 -07:00
Vadim Kurland
7feb2f4731
show tag service object name in the Options column
2011-05-02 13:39:14 -07:00
Vadim Kurland
4e6b10cbc9
draw text line aligned with the icon in action and direction columns
2011-05-02 13:36:15 -07:00
Vadim Kurland
dc5ebd940b
see #2367 added support for action Continue for PF; tagging, classifictation and routing as options work for PF
2011-04-30 21:23:17 -07:00
Vadim Kurland
0845607d19
see #2367 when cell is selected, paint whole cell for action and direction just like it is done with options for consistency
2011-04-30 19:48:41 -07:00
Vadim Kurland
b349745459
see #2367 drawing icons in the cell "Options" vertically; icons for tag, classification and routing are drawn with parameters
2011-04-30 19:45:22 -07:00
Vadim Kurland
b2b656df5d
Merge branch 'development' into multiple_actions
2011-04-30 18:55:30 -07:00
Vadim Kurland
b9187f57ca
see #2376 need to recalculate the size of the column "Options"
2011-04-30 18:55:11 -07:00
Vadim Kurland
2a83b756e7
updated dialog layout
2011-04-30 14:40:19 -07:00
Vadim Kurland
6b41cb4489
merged latest changes from development
2011-04-30 13:54:34 -07:00
Vadim Kurland
a1d70da445
build 3535
2011-04-30 12:57:12 -07:00
Vadim Kurland
32302739fd
see #2373 using different signal to call RuleSetView::updateAllColumnsSize() only once instead of doing it for each rule using object that changed
2011-04-30 12:48:47 -07:00
Vadim Kurland
7627a82cfe
see #2373 first fix for this problem
...
The change in UsageResolver
eliminates unnecessary scanning of all rule sets to check if the
affected rule set might be used as a branch. The program used to
scan the same objects many times.
.
2011-04-29 18:50:37 -07:00
Vadim Kurland
97ed9bf03a
fixes #2369 added release notes for 4.2.1
2011-04-29 13:13:44 -07:00
Vadim Kurland
2a00cea691
build 3534
2011-04-29 12:37:10 -07:00
Vadim Kurland
a62f914887
* iosaclAdvancedDialog.cpp (accept): fixes #2368 and SF bug
...
3294457 "External install script". External install script name
and arguments werent saved for IOS firewall objects.
2011-04-29 12:06:16 -07:00
Vadim Kurland
bb5abafe5b
* snmpNetworkDiscoveryWizard/ND_ProgressPage.h: fixes #2370 , #2371
...
"broken signals in network discovery wizard". Network discovery
wizard was not correctly initializased and did not work.
2011-04-29 11:49:06 -07:00
Vadim Kurland
1fe2f85c00
build 3533
2011-04-28 23:15:08 -07:00
Vadim Kurland
beafb18186
tag, classify and route options now work in the GUI; so far, only showing icons without the parameter in the rule set view; editor works, rule set view works
2011-04-28 20:58:22 -07:00
Vadim Kurland
5a7646ebd9
Added generic function to connect correct signals of all widgets inside a dialog to its slot "changed()" without having to do this manually in the designer
2011-04-28 20:57:20 -07:00
Theron Tock
655fc9356f
Fixes #2182 .
...
Convert use of sprintf to snprintf (hopefully in a way that also works
on windows).
2011-04-28 16:58:22 -07:00
Theron Tock
78c585de62
Fixes #2121 .
...
Got rid of a bunch of #includes that don't seem to be necessary,
including a messy conditional one for <streambuf>
2011-04-28 15:52:18 -07:00
Theron Tock
546279ab1a
Fixes #1557 .
...
Make "Object" text left-justified in tree view. Also put a 120 pixel
min width on tree view and make it non-collapsible so that the user
can't accidently hide the tree view entirely.
2011-04-28 11:05:11 -07:00
Theron Tock
28a7eeb014
Fixes #2360 (modifies fix for #2219 ). Just make sure the object
...
is visible, but not necessarily centered. Otherwise with a wide
tab for "Object" (but only some of the tab is visible) the text
might not be visible at all.
2011-04-28 11:02:28 -07:00
Vadim Kurland
629b0b31e2
see #2367 removed actions Tag, Classify, Route and added options instead; added functions to class PolicyRule to check and set these options; replaced checks for those actions with calls to the functions everywhere.
2011-04-27 18:44:38 -07:00
Vadim Kurland
57a195538b
fixed SF bug 3169045 - problems with batch install; build 3532
2011-04-26 17:40:56 -07:00
Vadim Kurland
c63a347e80
more fixes for SF bug 3169045. Check if putty_session is not empty in addition to checking if maddr is not empty in instDialog::verifyManagementAddress(); added more debug print to help me trace it on windows
2011-04-26 16:38:37 -07:00
