onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-22 03:07:20 +01:00
Code Issues Releases Wiki Activity
3,634 Commits 3 Branches 3 Tags
Commit Graph

1030 Commits

Author SHA1 Message Date
Vadim Kurland
9292895800 see #2037 
Compile/install wizard should disable "Next" button
after compile phase is done if all firewalls failed to compile
with no errors.

see #2061
Added
bunch of common shell error messages to make sure installer
recognizes them and mark install as a failure even if ssh fails
to pass termination code.
 2011-02-08 20:20:01 -08:00
Vadim Kurland
1460fef57f fixes #2042 add configlet and shell functions to manage bridge interfaces via shell script on OpenBSD and FreeBSD 2011-02-08 14:10:33 -08:00
Vadim Kurland
78bb5a5ba7 fixes #2054 add support for load anchor command 2011-02-08 11:22:39 -08:00
Vadim Kurland
99a0b3d412 fixes #2055 Compiler shows success, but there was a fatal error in the config; the problem affected compilers for all platforms, not only pix 2011-02-07 23:05:27 -08:00
Vadim Kurland
87c8fcb2ac fixes #1914 Address table object file name is not created properly if user clicks outside Editor panel 2011-02-07 17:50:22 -08:00
Vadim Kurland
e2f05c1e0a see #2049 Installer reports success even if there was an error while creating static routes; new build 3462 2011-02-06 19:34:09 -08:00
Vadim Kurland
a28cdd359a see #1889, #2043 
Added support for bridge interface configuration in BSD.
 2011-02-06 13:10:46 -08:00
Vadim Kurland
47dd932529 see #2039 Installer reports success even if pfctl cant load config file 2011-02-05 20:36:24 -08:00
Vadim Kurland
7532c769a6 see #2038 pfctl error when firewall settings include scrub option for reassembly 2011-02-05 20:23:39 -08:00
Vadim Kurland
9d2eb88522 fixes #2032 (added dhcp inetrfaces to generated rc.conf.local); see #2028 tested basic static routees on FreeBSD in both shell and rc.conf formats 2011-02-04 17:57:01 -08:00
Vadim Kurland
e7083f157c fixes #2026 Compiler can now generate static routing configuration 
in rc.conf format for FreeBSD.
 2011-02-03 16:46:46 -08:00
Vadim Kurland
8fbb48b280 fixes #2021 since rc.conf format is only supported for FreeBSD, the option in the dialog should not be available for other OS 2011-02-03 16:06:13 -08:00
Vadim Kurland
39eaf40722 see #1888, #2020, #2018 rc.conf format of the init script for PF on FreeBSD, includes inetrfaes. addresses, CARP, pfsync and pf initialization 2011-02-02 17:45:36 -08:00
Vadim Kurland
2b2d1e81a9 see #2015 ability to set the name of the initalizatio and .conf files for PF 2011-02-01 20:35:33 -08:00
Vadim Kurland
dd86fcc5e2 see #1890 "Add 
support for configuring static routes on BSD". Implemented support
for simple static routing rules. ECMP and routing via interface
(routing to directly reachable subnets) are not
supported. Generated script preserves static routing entries that
existed before and attempts to recover in case of error. Needs
testing.
 2011-01-31 18:29:20 -08:00
Vadim Kurland
7b0573c478 see #2006 clearing editor panel when data file panel is closed; new build 3455 2011-01-30 14:46:07 -08:00
Vadim Kurland
93b3b12bab see #2000 Added page to the new firewall wizard to let the 
user configure network zones of interfaces when chosen firewall
platform supports network zones (only PIX/ASA right now).
 2011-01-28 16:43:13 -08:00
Vadim Kurland
a8dd192bec see #1983 ASA multiple interfaces have the same security level; using QTableWidget with QSpinBox widgets in the last column to let the user edit secrity levels directly 2011-01-28 13:13:14 -08:00
Vadim Kurland
5ec0e428dd see #1998 update ChangeLog to reflect latest change 2011-01-28 09:58:25 -08:00
Vadim Kurland
eb984a4e39 new build 3452 2011-01-27 22:12:27 -08:00
Vadim Kurland
8e0159f197 see #1996 2011-01-27 19:23:53 -08:00
Vadim Kurland
a67aaacb26 * IOSImporterRun.cpp (run): see #1931 "Update failed import 
behavior". Added meaningful error messages for when policy
importer fails to create firewall object or does not create
interface objects or any rules.
 2011-01-27 13:09:06 -08:00
Vadim Kurland
b3f34b06ac * Rule.cpp (removeRef): fixes #1997 "add removeRef and addRef 
methods to class NATRule". Now undo and redo correctly remove and
restore references to NAT rule sets in NAT rules with action
Branch.
 2011-01-27 11:58:02 -08:00
Vadim Kurland
804189fb75 * Rule.cpp (addRef): fixes #1991 "Undo does not restore object as 
a parameter of policy rule action Branch or Tag after it was
deleted deleted". Now Undo restores references to rule sets and tag
services as arguments of corresponding policy rules, as well as
references to objects configured as interface network zones.
 2011-01-27 11:50:03 -08:00
Vadim Kurland
9cc60050ee see #1987 Deleting object that is used as Network Zone for ASA/PIX interface results in inconsistent behavior. When an object that is used as a network zone of some interface is deleted, it should be removed from that interface configuration as well. 2011-01-27 11:35:24 -08:00
Vadim Kurland
4bba7533c8 see #1995 Crash when compiling a cluster with identical firewalls. Needed to call base class Firewall::init() to create Policy, NAT and Routing objects. The fact that member firewalls are identical as reported in the ticket is a red herring 2011-01-27 11:06:31 -08:00
Vadim Kurland
535b8e27eb see #1994 Crash when compiling a firewall in an imported Library. Compilers reset read-only flags on the firewall and all objects in the tree above it before making any changes to the copy of the tree they work with 2011-01-27 10:54:11 -08:00
Vadim Kurland
cf543d7adf fixes #1992, #1993, see #1994 2011-01-26 21:49:31 -08:00
Vadim Kurland
eb61a51c89 fixes #1989: 
Got rid
of global variables sysfname, tempfname, librespath, respath and
localepath; will now use class Constants to keep this information.
 2011-01-26 13:27:57 -08:00
Vadim Kurland
9b1c98f0f4 fixes #1937 RES_DIR macro is defined twice 2011-01-25 17:09:20 -08:00
Vadim Kurland
71a94277a8 fixes #1985 implement FWObjectDatabase::setPredictableIds as virtual function 2011-01-25 16:38:35 -08:00
Vadim Kurland
2c85c952bf see #1986 Cisco ASA remarks should be truncated to 100 characters or less; truncated remark lines 2011-01-25 11:25:20 -08:00
Vadim Kurland
d331ee7840 fixes #1966 IOSACL: object-group can get name that consists of only suffix 2011-01-24 18:28:48 -08:00
Vadim Kurland
498d9456ca see #1980 Objects from Deleted Objects should not be allowed to be used in rules 2011-01-24 17:09:49 -08:00
Vadim Kurland
7c1108204e see #1958 consistently use "exit" to get out of nested context in pix config 2011-01-24 16:41:34 -08:00
Vadim Kurland
7e7f5509d2 see #1970 ASA Policy - single IPv6 icmp object allowed in rules 2011-01-24 16:33:43 -08:00
Vadim Kurland
5961400eb4 see #1981 ASA / FWSM Policy - Generate warning message if rule will not generate config data 2011-01-24 11:53:22 -08:00
Vadim Kurland
5ca7d180e3 call context menu item "Inspect" instead of "Edit" when object is read-only 2011-01-22 19:51:45 -08:00
Vadim Kurland
36831643af fixes #1926 Crash when moving object in Standard library 2011-01-22 19:47:09 -08:00
Vadim Kurland
7d3b11796d see #1976 disable "Paste" context menu items when object in the clipboard has been deleted 2011-01-22 19:38:40 -08:00
Vadim Kurland
555e9425eb see #1968, #1972 object group deduplication finally works 2011-01-22 10:18:19 -08:00
Vadim Kurland
12d93a54c0 fixes #1963 move printing of object-group definitions to 
NamedObjectManager::getNamedObjectsDefinitions(); also refactoring of the code that generates "clear" commands
 2011-01-20 17:25:09 -08:00
Vadim Kurland
34630953cc see #1959 ASA Policy - ranges are broken into composite network instead of using range command. I now create named objects to represent address ranges and put them into object-group, whcih I can then use in access-list commands 2011-01-20 14:34:00 -08:00
Vadim Kurland
7058a72f3e see #1965 ASA Policy - PIX 6.1 configurations use object groups 2011-01-20 10:10:10 -08:00
Vadim Kurland
ea2caa4413 see #1951 simplify object-group names 2011-01-20 09:54:08 -08:00
Vadim Kurland
c34a758430 see #1959 ASA Policy - ranges are broken into composite network instead of using range command 2011-01-19 20:27:47 -08:00
Vadim Kurland
ca4c132e2b see #1954 "ASA NAT - generate warning if nat rule is split and one of the resulting nat rules have the same real interface and mapped interface". 2011-01-19 18:26:08 -08:00
Vadim Kurland
e20321fc74 see #1953 "ASA NAT - two host 
objects in the same rule result in incorrect config".
 2011-01-19 14:19:00 -08:00
Vadim Kurland
340c659677 see #1960 add support for CustomService for PIX policy rules 2011-01-19 11:59:53 -08:00
Vadim Kurland
e744ddf200 new build, minor text fix in ChangeLog 2011-01-18 19:42:41 -08:00