Vadim Kurland
a8b65e6506
getting rid of sprintf where I can
2011-02-18 22:09:50 -08:00
Vadim Kurland
66681b9695
see #153 #133 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for PF
2011-02-18 18:54:21 -08:00
Vadim Kurland
2542b082f3
see #153 #2097 got rid of getInterfaceStr and getInterfaceId in policy and nat compilers for iptables
2011-02-18 18:48:16 -08:00
Vadim Kurland
faece9e40c
see #2097 more test cases with negation and vlan interfaces
2011-02-17 18:39:17 -08:00
Vadim Kurland
581ccdc68e
see #2097 #133 additional test cases
2011-02-17 18:01:45 -08:00
Vadim Kurland
6f30bc3446
* NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for
...
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
2011-02-17 17:48:04 -08:00
Vadim Kurland
d0ae7bac01
* NATCompiler_ipt.cpp (processNext): see #2097 #133 "support for
...
inbound and outbound interface columns in iptables NAT
rules". This also addresses SF feature requests 1954286 "DNAT with
interface as condition not possible" and 621023 "manipulating
interface in NAT rule".
2011-02-17 17:47:42 -08:00
Vadim Kurland
5162212073
see #2097 #133 : no need to replace cluster interfaces with member interfaces in NATCompiler_pf::AssignInterface::processNext() since it was already done in replaceClusterInterfaceInItfOutb
2011-02-17 15:36:28 -08:00
Vadim Kurland
cf17bb995c
see #2097 showing "interface" columns in iptables NAT ruels
2011-02-17 15:27:37 -08:00
Vadim Kurland
fdb899bdd2
* NATCompiler_ipf.cpp (processNext): see #133 , fixes #2108 making
...
nat compiler for ipfilter work with interface column, however the
column is not exposed to the user. Compiler behavior should be
backwards compatible with older versions of fwbuilder.
2011-02-17 12:06:50 -08:00
Vadim Kurland
100dca74bb
* NATCompiler_pf.cpp (processNext): see #133 . MErged code from the
...
branch, running tests. Making sure rules that have firewall
object in ODst and interface columnblank end up with rdr command
without "on interface" clause as before.
2011-02-17 11:50:14 -08:00
Vadim Kurland
8b158c0a74
* OSConfigurator_bsd_interfaces.cpp (configureInterfaces): make
...
sure we print "ifconfig" commands for mtu and other parameters for
all interfaces, including those with no ip addresses and bridge
ports (unnumbered interfaces used to be skipped before)
2011-02-16 16:23:54 -08:00
Vadim Kurland
8de52b3f06
fixes #2093 build failed because function QStringList::removeDuplicates() is only available in Qt 4.5
2011-02-16 15:49:02 -08:00
Vadim Kurland
1f8363c84e
* configlets/bsd/update_vlans: see #2105 : generated script now
...
supports vlan interfaces with names that do not match vlan IDs
(OpenBSD, FreeBSD, shell script format).
2011-02-16 15:22:47 -08:00
Vadim Kurland
f4858bfc83
fixes #2106 avoid adding pfsync_enable line if it is not needed in rc.conf format
2011-02-16 14:47:10 -08:00
Vadim Kurland
a58445ed16
see #1807 , #2104 arrange interface configuration commands in the
...
generated scritpt in such order that bridge and carp interfaces
are configured after all other interfaces are done.
2011-02-16 14:42:06 -08:00
Vadim Kurland
9ae36f6632
see #2103 added checkbox to disable interface name validation checks and autoconfiguration of vlan interface IDs
2011-02-16 13:27:38 -08:00
Vadim Kurland
4d9abebb64
new build, reran tests for ipt
2011-02-15 14:29:43 -08:00
Vadim Kurland
0df4ae9abd
* ActionsDialog.cpp (setRule): see #1871 "PF Actions Tag and
...
Classify can be terminating or non-terminating". Added checkbox to
the action properties dialog for actions Tag and Classify for PF
that lets the user choose if these actions should be terminating
or not. Old behavior (Tag was non-terminating and Classify was
terminating) is reflected in default settings of the checkboxes.
Terminating rules generate "pass quick" commands, while
non-terminating rules generate "pass" commands (no "quick" option).
2011-02-15 14:20:27 -08:00
Vadim Kurland
bee424b3d0
fixes #2091 ethernet intrface options a used twice if the interface is a bridge port
2011-02-14 16:08:54 -08:00
Vadim Kurland
ec5bb2290d
fixes #2092 parameter "stp" is now optional and is controlled by a checkbox in the interface settings dialog
2011-02-14 15:53:55 -08:00
Vadim Kurland
143594ddc7
see 2058 fixed mtu configuration commands generated for FreeBSD in shell script mode
2011-02-14 10:44:04 -08:00
Vadim Kurland
7de1edab4b
see #1867 Since action Tag is non-terminating, rules with
...
this action should not shadow other rules.
2011-02-13 18:03:12 -08:00
Vadim Kurland
19b9b2482b
see #2078 added verbose error
...
message in a situation when "ifconfig carp0 create" command fails
to create CARP interface.
2011-02-11 13:53:39 -08:00
Vadim Kurland
be38fc57ba
see #2058 Ability to configure mtu and metric of regular inetrfaces
2011-02-11 13:00:40 -08:00
Vadim Kurland
04ef96c5fa
see #2060 using correct syntax for commands to clear objects and object-groups on PIX 6.3 and other versions
2011-02-10 15:08:32 -08:00
Vadim Kurland
35749e782c
fixes #1999 using tool "command" to make sure utilities we need are available and can be accessed either by full path or using PATH env variable; this includes logger as requested in the ticket
2011-02-10 14:53:44 -08:00
Vadim Kurland
c2b41c1f4b
see #2071 vlandev missing in the vlan definition (when using rc.conf.local )
2011-02-10 12:45:49 -08:00
Vadim Kurland
8d97c4ab6e
fixes SF bug 3102044 "Colon in (runtime) Address Table name"
2011-02-10 12:12:26 -08:00
Vadim Kurland
383d9e41d9
see #2069 PF: allow multiple objects in ODst of redirecting nat rule
2011-02-10 11:25:52 -08:00
Vadim Kurland
69896936ba
see #2042 re-ran tests
2011-02-08 14:13:04 -08:00
Vadim Kurland
1460fef57f
fixes #2042 add configlet and shell functions to manage bridge interfaces via shell script on OpenBSD and FreeBSD
2011-02-08 14:10:33 -08:00
Vadim Kurland
78bb5a5ba7
fixes #2054 add support for load anchor command
2011-02-08 11:22:39 -08:00
Vadim Kurland
d18427a9cc
see #2048 PF compiler doesnt detect duplicate entries in Routing policy; added rule elements to catch and suppress duplicate routing commands
2011-02-07 17:06:42 -08:00
Vadim Kurland
b244b5ff4d
fixes #2045 static route IDs used in rc.conf file must be stable
2011-02-07 15:17:36 -08:00
Vadim Kurland
bef9936ed5
making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line
2011-02-07 15:00:36 -08:00
Vadim Kurland
ba8c15e31d
fixes #2040 rename functions in OSConfigurator_bsd
2011-02-06 15:09:44 -08:00
Vadim Kurland
242f0724c8
output ifconfig or update_addresses_of_interface lines in a stable order, sorted by interface name
2011-02-06 14:55:56 -08:00
Vadim Kurland
a28cdd359a
see #1889 , #2043
...
Added support for bridge interface configuration in BSD.
2011-02-06 13:10:46 -08:00
Vadim Kurland
9d2eb88522
fixes #2032 (added dhcp inetrfaces to generated rc.conf.local); see #2028 tested basic static routees on FreeBSD in both shell and rc.conf formats
2011-02-04 17:57:01 -08:00
Vadim Kurland
ceb6fc8865
fixes #2031 FreeBSD - firewall script command to delete existing routes fails
2011-02-04 16:32:08 -08:00
Vadim Kurland
e7083f157c
fixes #2026 Compiler can now generate static routing configuration
...
in rc.conf format for FreeBSD.
2011-02-03 16:46:46 -08:00
Vadim Kurland
8fbb48b280
fixes #2021 since rc.conf format is only supported for FreeBSD, the option in the dialog should not be available for other OS
2011-02-03 16:06:13 -08:00
Vadim Kurland
8459b6e061
see #2023 refactoring determineOutputFileNames()
2011-02-03 15:44:24 -08:00
Vadim Kurland
424b6d0604
re-ran tests
2011-02-03 10:07:55 -08:00
Vadim Kurland
58ed0f4df2
re-ran tests
2011-02-03 10:06:20 -08:00
Vadim Kurland
2995ee37f5
re-ran tests
2011-02-03 10:03:49 -08:00
Vadim Kurland
5420f21ce1
re-ran tests
2011-02-03 09:56:08 -08:00
Vadim Kurland
129db6881c
re-ran tests
2011-02-03 09:55:19 -08:00
Vadim Kurland
3d88c4ce46
fixes #2019 Cluster name is not prepended to the name of generated pf.conf file
2011-02-03 09:52:37 -08:00
