onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-17 02:19:21 +02:00
Code Issues Releases Wiki Activity
2,536 Commits 3 Branches 3 Tags
9b7334a61f41d9638000a8909854735335ebd455
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland 9b7334a61f fixed SF bug 3035426 "canceled 
save writes .fwb ".
 2010-07-28 23:05:08 +00:00
Vadim Kurland 3c6102f961 fixed #1631 "Process branch rule sets recursively". 
fixed #1632 "dependencies created by branching rule sets should be
processed recursively"
fixed SF bug 3033462
 2010-07-28 21:39:28 +00:00
Vadim Kurland a51d1733fc fixed #1640 "default policy when the script is stopped should be 
optional".
 2010-07-27 22:10:53 +00:00
Vadim Kurland 0e8bcac379 fixed #1634 - compiler warning 2010-07-27 21:23:05 +00:00
Vadim Kurland 1d81616677 fixed comment 2010-07-27 01:20:09 +00:00
Vadim Kurland 74063d35c3 implemented support for mixed address lists for run-time address table objects with ipset module 2010-07-27 01:14:04 +00:00
Vadim Kurland da80eac2dd patch by slif to make the test work more reliably. Fixes #1638 2010-07-26 16:01:34 +00:00
Vadim Kurland 7efbcf6825 * code cleanup. Removed bunch of warnings and cleaned up some test 
cases using small patches from Mike Slifcak  slif@bellsouth.net
 2010-07-25 03:41:27 +00:00
Vadim Kurland 4ad0e5be21 minor cleanup, removed few warnings and fixed code that loads resources in ImporerTest 2010-07-24 16:21:12 +00:00
Vadim Kurland a1c7183d4c updated release notes 4.1 2010-07-24 06:47:36 +00:00
Vadim Kurland e1bca13699 * Fixes #1635: included code generated by the configlet 
run_time_address_tables into script for all linux-based host
OS
 2010-07-24 06:41:46 +00:00
Vadim Kurland 1a8d8cd1ea fixed #1633 use ipset module in NATCompiler_ipt 2010-07-24 06:03:48 +00:00
Vadim Kurland e7983c0eeb additional unit test for run_time_address_tables configlet 2010-07-24 05:05:48 +00:00
Vadim Kurland 46be5ec6c1 updated changelog to mention fix for #1628 2010-07-24 03:10:20 +00:00
Vadim Kurland 8c90295231 fixes 1625, #1627 See #137 added configlet for run time adress table objects with ipset module to check ipset tool and the module, check and load data from address table files 2010-07-24 03:09:02 +00:00
Vadim Kurland 11cb56d6c9 * PolicyCompiler_PrintRule.cpp (PrintRule::normalizeSetName): 
fixed #1626 "convert space and other special characters found in
the run time address table object into underscores". The name of
the run-time Address Table object is used for the name of the
ipset module set. Making sure the name is sanitized of the
chanracters considered "special" by shell before it is used.
 2010-07-24 00:02:53 +00:00
Vadim Kurland 15e8677943 * check_utilities: fixed #1625, #see 137: added ipset to the list 
of command line utilities generated iptables script can
use. Script will check if the utility is present on the firewall
if user requested use of iptables module "set" for run-time
Address Table objects. Also added an input field for ipset in the
advanced settings host OS dialog for Linux to let the user specify
path to ipset if it is not standard.
 2010-07-23 23:38:38 +00:00
Vadim Kurland e82f770956 * PolicyCompiler_PrintRule.cpp: added support for iptables module 
"set" used to generate iptables command for rules with run-time
AddressTable objects. This module is only available in iptables
1.4.1.1 and later, however some embedded platforms do not have it
even though they ship later versions ofiptables (e.g. OpenWRT).
Use of this module is controlled by a checkbox in the iptables 
"advanced" settings dialog which is off by default. This checkbox
becomes disabled when iptables version is set to < 1.4.1.1.
 2010-07-23 05:15:05 +00:00
Vadim Kurland 56ce332788 * newClusterDialog_create.cpp (newClusterDialog::createNewCluster): 
fixed #1622 "Crash when configuring cluster". The GUI used to crash
if user created a cluster copying rules of one of the cluster members
while that rule set was opened in the rule set view.
 2010-07-22 23:54:32 +00:00
Vadim Kurland df647bfab2 see #1615 better dialog layout but still too wide 2010-07-22 04:26:04 +00:00
Vadim Kurland 53a08e03c1 iptables "advanced" settings dialog redesign 2010-07-22 02:01:13 +00:00
Vadim Kurland 076cfdc8f1 fixed tab order in the interface editor widget See #1613 2010-07-22 01:11:42 +00:00
Vadim Kurland 7bd96d7042 rearranged elements in the interface editor widget to reduce its height. See #1613 2010-07-22 01:06:43 +00:00
Vadim Kurland 350fbfb45d * InterfaceEditorWidget.ui: set minimum height for the name, label 
and few other input fields because they came out squished on Mac.
Fixes #1613.
 2010-07-22 00:22:33 +00:00
Vadim Kurland 559d22e137 * FWWindow.cpp (fileNew): fixed #1611 "File/New should create new 
project panel". Like #1612, open new data file in a new project
panel if current project panel has no data file associated with it
but has unsaved changes.
 2010-07-21 23:45:22 +00:00
Vadim Kurland b48d84e6ab * FWWindow.cpp (loadFile): fixed #1612 "File/Open should create 
new project panel". If user has some unsaved changes in the
default project panel (the one with no associated file) and then
uses File/Open menu to open another data file, the file should
open in a new project panel.
 2010-07-21 23:40:35 +00:00
Vadim Kurland d870730db2 merge from v4_0 branch r3122-3124 2010-07-21 16:10:10 +00:00
Vadim Kurland fafcb2202c renamed release notes file; made main window wider by default 2010-07-21 05:06:19 +00:00
Vadim Kurland b8564b8f61 now really /4.1 in settings 2010-07-21 01:20:29 +00:00
Vadim Kurland b98bdd2584 setting spath /4.1 2010-07-21 01:05:07 +00:00
Vadim Kurland 8a4fb97afe upgraded test data files for 4.1 2010-07-20 23:45:05 +00:00
Vadim Kurland 7247990781 added copy of routing_functions configlet for dd-wrt 2010-07-20 23:42:39 +00:00
Vadim Kurland 82d85270f5 Creating v4.1.0 branch 2010-07-20 23:05:46 +00:00
Vadim Kurland c077f60e13 fixed #1603 Welcome dialog should show full version of the program 2010-07-20 22:19:08 +00:00
Vadim Kurland 565e888472 version 4.1.0 2010-07-20 18:02:45 +00:00
Vadim Kurland 53950163aa code clean-up 2010-07-20 16:54:37 +00:00
Vadim Kurland 671e772e1b fixed SF bug #3031930 "segfault starting discovery druid" 2010-07-20 06:29:22 +00:00
Vadim Kurland 468746142b fixing unit tests for the latest change 2010-07-20 03:52:42 +00:00
Vadim Kurland ebf137670c fixed SF bug 3031721 Standard bjects library was made read-write by mistake in one of the earlier builds 2010-07-19 22:33:45 +00:00
Vadim Kurland a70ef0272d fixed #1597 import method "import configuration of a firewall" is disabled on the first page of the discovery druid 2010-07-18 01:38:46 +00:00
Vadim Kurland 281a418b7b fixed #1583 added file open_source_licenses.txt and included putty license in it 2010-07-18 00:43:10 +00:00
Vadim Kurland d7a59583c9 fixed #1584 removed empty files 2010-07-18 00:23:12 +00:00
Vadim Kurland 20caea4f99 fixed #1585 script should not restart itself, just fill a variable with default command "start" 2010-07-18 00:21:35 +00:00
Vadim Kurland cb020de62c Refs #1587 trying to eliminate unnecessary events when the same object is updated in the tree many times 2010-07-18 00:07:27 +00:00
Vadim Kurland 8e9ac0a8ce release notes synchronized with changelog 2010-07-15 19:24:36 +00:00
Vadim Kurland e75d3ccdb0 minor updates in test data files after they were loaded in the latest version of the gui 2010-07-15 17:09:55 +00:00
Vadim Kurland f71349678e fixed #1582 tree is not refreshed when new network objects are created in the newFirewallDialog 2010-07-15 17:09:25 +00:00
Vadim Kurland 8a28fa0984 trying to fix unit test instDialogCompileTest.cpp 2010-07-15 02:01:38 +00:00
Vadim Kurland b6d53c7298 fixed #1571 "Installer does not work if firewall object name 
contains spaces". Installer should use escaping to make sure
file name with a space is correctly interpreted by the script
it runs on the firewall.
 2010-07-14 23:22:49 +00:00
Vadim Kurland 73e1ee1f0d fixed #1544 "fwbuilder crashes during import of file with rtf 
formatting data". The fix should prevent crashes in other cases
when import was unsuccessful.
 2010-07-14 19:26:11 +00:00
Vadim Kurland 24aa70ecbf debugging on windows 2010-07-12 03:01:52 +00:00
Vadim Kurland b6260cae89 fixed SF bug 3027284 added input field for ssh timeout in the Installer tab of global prefs dialog. Still needs testing on windows 2010-07-12 02:31:41 +00:00
Vadim Kurland 635e9f3df1 fixed unit test data files for SF bug 3027272 2010-07-10 20:00:38 +00:00
Vadim Kurland 4c2b0d4f09 fixed SF bug 3027272 2010-07-10 19:36:10 +00:00
Vadim Kurland f8918cbb9a more checks for printing from command line, See #1533 2010-07-03 16:02:24 +00:00
Vadim Kurland 20ca3b3e02 fixed #1528 fixed typo in the warning message 2010-06-29 00:28:40 +00:00
Vadim Kurland d48283c45e see #1541 fixed warning dialog grammar 2010-06-29 00:27:23 +00:00
Vadim Kurland 047083a41c applied patch from SF bug 3013532 to make file chooser dialogs show files with no extension 2010-06-28 23:48:34 +00:00
Vadim Kurland beb7952eca * utils.cpp (parseCommandLine): See #1542 since now user can enter 
differet command line parameters together with the path to ssh and
scp clients in the global Preferences dialog, we need to parse
these properly. This is especially important if file paths or
arguments contain white space characters. Unit tests are in
src/gui/unit_tests/parseCommandLineTest
 2010-06-28 23:14:56 +00:00
Vadim Kurland 8f695ec044 refs #1346 button "inspect" should be enabled only if some files were actually produced during compilation 2010-06-28 16:34:53 +00:00
Vadim Kurland a97c25c49a fixed build problem with old Qt 2010-06-27 22:46:58 +00:00
Vadim Kurland bb9ca9456e removed exccesive debug print 2010-06-27 21:05:05 +00:00
Vadim Kurland cbd11fb9be see #1346 fixed navigation and cleaned up instDialog wizard 2010-06-27 19:22:37 +00:00
Vadim Kurland cbc2b1278a updated release notes 2010-06-27 04:55:40 +00:00
Vadim Kurland af71f2d80b automatically configuring putty session fwb_session_with_keepalive on windows 2010-06-27 04:54:47 +00:00
Vadim Kurland f0c8bfa2e8 all instllation commands should be 
on the single line
 2010-06-27 04:20:39 +00:00
Vadim Kurland fc517354c8 assembling ssh and scp path and all command line parameters in FirewallInstaller instead of ssh wrapper code 2010-06-27 01:39:41 +00:00
Vadim Kurland 1bbeb0f04f SF bug 3020381: Line failure should abort remote firewall install. Using ssh keepalives to make ssh client detect disconnect. Currently works only with unix ssh clients 2010-06-27 00:47:00 +00:00
Vadim Kurland b01a45204f do not verify network zones of unprotected interfaces 2010-06-27 00:30:00 +00:00
Vadim Kurland fe684e16c1 release notes and changelog records 2010-06-25 21:49:26 +00:00
Vadim Kurland afdc06d9f6 using QStringList class methods available in QT 4.3 2010-06-25 19:48:28 +00:00
Vadim Kurland 1994f02f4d * OSConfigurator_linux24::printVirtualAddressesForNatCommands: 
fixed bug 3001228 "v4.0.0 iptables: NAT not creating interface
addresses". Iptables script generated by fwbuilder used to include
commands to configure virtual ip addresses for NAT only if option
"configure interfaces" was turned on. Expected behavior is to
generate these commands when option "Add virtual addresses for
NAT" is turned on regardless of the setting of the option
"configure interfaces".
 2010-06-25 03:38:24 +00:00
Vadim Kurland f4c5090383 changelog records 2010-06-25 00:41:14 +00:00
Vadim Kurland 1ee9ca248d * PolicyCompiler_ipt.cpp (specialCaseWithFWInDstAndOutbound::processNext): 
fixed #1523 "outbound ipv6 rule matching multicast ipv6 destination
is not generated". The rule with network object fe80::/10 in source
and ipv6 muticast ff00::/8 in destination did not produce correspondign
ip6tables command. The change affects other cases with rules using
broadcast or multicast objects that should be considered matching
the firewall object.
 2010-06-17 23:58:17 +00:00
Vadim Kurland dadfcfbc18 changelog entry 2010-06-17 17:59:46 +00:00
Vadim Kurland a93dcf58e2 * IPTImporter.cpp (IPTImporter::pushPolicyRule): fixed SF bug 3017084 
"compiler adds extra quote characters to log-prefix string".
 2010-06-17 05:06:19 +00:00
Vadim Kurland 3ad8cd4661 see #1493 checking in icons 2010-06-17 04:56:50 +00:00
Vadim Kurland 2467927ed5 fix for the SF bug 3015979 fwbuilder not exiting in centos 5.5 2010-06-17 04:49:30 +00:00
Vadim Kurland aa68200d6d refs #1493 made workflow buttons look like buttons, with a frame and all 2010-06-17 04:31:21 +00:00
Vadim Kurland d670e07a6a test case for #1523 2010-06-16 15:18:07 +00:00
Vadim Kurland f85bc72a8e * IPTImporterRun.cpp (IPTImporter::run): policy importer for 
iptables replaces --sport and --dport parameters of module
multiport with --source-ports and --destination-ports to remove
grammar ambiguity that arises from the use of the same parameters
--sport and --dport by different iptables modules with different
argument syntax.
 2010-06-16 04:39:25 +00:00
Vadim Kurland d8427e6eb5 * iptables.g (match_iprange_src): Fixed SF bug 3016779: Policy 
importer for iptables should understand module iprange
 2010-06-16 03:36:47 +00:00
Vadim Kurland fca2df9215 * FWWindow.cpp (FWWindow::prepareFileMenu): fixed bug 3016720 
"import policy disabled after file close". Menu items "File/Import
Library" and "File/Import policy" became disabled after user
closed data file using "File/Close" and never became enabled
again.

also fixed #1494 flush duplicate uuid
 2010-06-15 20:50:45 +00:00
Vadim Kurland ae6a26e1f2 explicitly set direction in the branch rule created to handle complex match of a regular service and ESTABLISHED,RELATED state. See #1516 2010-06-15 03:28:00 +00:00
Vadim Kurland b437626a78 option to show text with toolbar icons is now on by default; updated changelog and release notes 2010-06-15 03:07:35 +00:00
Vadim Kurland 23a6147e12 rearranged bullet points in release notes 4.0.2 2010-06-15 02:50:30 +00:00
Vadim Kurland 3bbffffa54 Added release notes for v4.0.2 to 
the package. fixes #1515
 2010-06-15 02:49:35 +00:00
Vadim Kurland 6502d09f78 * IPTImporter.cpp (IPTImporter::pushPolicyRule): fixed SF bug 
3015641 "imported REJECT rule changed during compile". Importer of
iptables rules did not handle properly parameters of the REJECT
target.
 2010-06-15 02:05:43 +00:00
Vadim Kurland b12b705426 rolling back the change done in r2983; comment added in the code to explain 2010-06-14 20:39:25 +00:00
Vadim Kurland 4975fba7e0 fixed memory leaks and few other problems detected with valgrind 2010-06-13 05:01:07 +00:00
Vadim Kurland b61e8e9e50 fixed #1516 policy importer for iptables should not use automatic ESTABLISHED rule 2010-06-13 03:44:23 +00:00
Vadim Kurland b501269b7e fixed #1507 typos, spell checking, url corrections 2010-06-13 00:38:11 +00:00
Vadim Kurland 26ae247aac * GroupObjectDialog.h (class GroupObjectDialog): fixed #1499 
"GroupObjectDialogTest.cpp does not compile with gcc 3.4.6" and SF
bug 3015307.  There is no reason to make method insertObject()
protected which caused problems (and hacky workaround) in the unit
test.
 2010-06-13 00:32:48 +00:00
Vadim Kurland 38adeae00a * IPTImporter.cpp (IPTImporter::finalize): fixed SF bug #3015305 
"compile error XML validity ". The problem was introduced with a
change that made policy importer cabaple of reproducing default
policies of main chains.
 2010-06-12 23:55:54 +00:00
Vadim Kurland f7c2b8777d * fixed SF bug #3013743 "UI build warnings" 2010-06-12 01:57:00 +00:00
Vadim Kurland a119cd963d * longtextdialog_q.ui, objconflictresolutiondialog_q.ui: fixed 
SF bug #3013735 "invalid pixmap properties during make". Fixed
uic warnings.
 2010-06-12 01:44:23 +00:00
Vadim Kurland 11e6d05849 * IPServiceDialogTest.cpp (IPServiceDialogTest::testIpOptions): 
fixed SF bug #3013855 "various fixes for run_tests". Applied
patch suggested by Michael J. Slifcak (with changes).
 2010-06-12 01:17:35 +00:00
Vadim Kurland ec0ee38969 * DiscoveryDruid.cpp (DiscoveryDruid::browseForImport): fixed SF 
bug #3013532 "file chooser dialog for import policy does not show
all files".
 2010-06-11 23:31:38 +00:00
Vadim Kurland 717cb3252c fixed #1513 2010-06-11 22:14:05 +00:00
Vadim Kurland 4ecb807f23 * IPTImporter.cpp (IPTImporter::finalize): see #1513 iptables 
importer should check default policy in standard chains.
 2010-06-11 20:27:35 +00:00