onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-17 18:39:07 +02:00
Code Issues Releases Wiki Activity
3,502 Commits 3 Branches 3 Tags
bfce60d98d857ab84c5e548b512d67180ca138fd
Commit Graph
3502 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland bfce60d98d see #1943 ASA Policy - mixed service group with TCP destination port range and standard TCP object generates invalid config; protocol word "tcp" was missing after "deny". Generated configuration still does not load! 2011-01-17 13:04:02 -08:00
Vadim Kurland f104cb6a11 see #1949 ASA NAT - split objects if OSrc contains objects that are in more than one network zone 2011-01-17 12:12:54 -08:00
Vadim Kurland 800205df51 new build 3436 2011-01-16 23:09:07 -08:00
Vadim Kurland 139d5ce2de * NamedObjectsAndGroupsSupport.cpp (processNext): Added support for 
CustomService objects in policy and nat rules for asa 8.3 using
named objects and object-groups.
 -- see #1942 "ASA NAT - if custom service is included in service
group incorrect config generated"
 -- see #1929 "move map named_objects inside class NamedObjectManager"
 -- see #1946 "restrict generation of the named objects by
PolicyCompiler_pix to ASA 8"
 -- see #1885 "named network and service objects in pix8"
 2011-01-16 23:02:49 -08:00
Vadim Kurland e2c2725e6b see #1941 ASA NAT - compiler complains about range in original destination 2011-01-16 20:19:43 -08:00
Vadim Kurland 5c01a0ec13 new build 2011-01-16 16:47:48 -08:00
Vadim Kurland 77690478f4 see #1940 ASA NAT - fwbuilder host objects interface ip is reserved keyword 2011-01-16 16:42:29 -08:00
Vadim Kurland 3e603c1375 see #1938 "icmp" commands were not properly generated for ASA 8.x policy rules 2011-01-16 16:09:29 -08:00
Vadim Kurland f74713b2fa see #1927 added check to prohibit nat rule that translates destination but has ODst "any" 2011-01-16 15:12:17 -08:00
Vadim Kurland f8904a9c3f Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-01-14 21:55:04 -08:00
Vadim Kurland b3a6d8553c new build number 2011-01-14 21:53:02 -08:00
Vadim cd4da4fb52 fixed build on Mandriva 2011-01-14 21:46:18 -08:00
Vadim Kurland acd509f7bc new build 2011-01-14 18:56:04 -08:00
Vadim Kurland 86584b6aac fixes #1932 Add description field to generated NAT rules for ASA 2011-01-14 18:50:46 -08:00
Vadim Kurland 25b7da796e fixes #1934 and SF bug 3156376 "Can 
not find interface with network zone that includes address range"
 2011-01-14 18:41:50 -08:00
Vadim Kurland 1932d3d02b new build 2011-01-13 19:14:13 -08:00
Vadim Kurland 99d0aba102 refs #1928 Support for object-group in OSrc 2011-01-13 19:05:58 -08:00
Vadim Kurland 0f99325869 test case, refs #1928 2011-01-13 18:03:54 -08:00
Vadim Kurland a04135be61 fixes #1925 2011-01-13 18:03:32 -08:00
Vadim Kurland 0d522e04dc new build 2011-01-13 13:37:44 -08:00
Vadim Kurland 64772160ac fixes #1917 Duplicate objects are not detected 2011-01-13 13:29:58 -08:00
Vadim Kurland 2235a162a9 fixes #1924 renamed module ObjectGroupsSupport to NamedObjectsAndGroupsSupport 2011-01-13 13:09:56 -08:00
Vadim Kurland b21bf113f8 fixes #1923 rename class ASA8Object to NamedObject 2011-01-13 13:03:52 -08:00
Vadim Kurland 63257170e8 refs #1885 using named objects and object groups when multiple objects are found in TSrc; this fixes issue with address ranges 2011-01-13 12:49:25 -08:00
Vadim Kurland 4ea6f24a03 fixed unreported bug: rule processor PolicyCompiler_cisco::removeRedundantAddresses removed both redundant objects in some cases, it depended on the order in which they appeared in the rule element 2011-01-13 12:46:08 -08:00
Vadim Kurland c532ca3f89 refactoring in class CreateObjectGroups 2011-01-13 11:03:49 -08:00
Vadim Kurland 59a90aabb1 fixes #1921 add rule processor to check correctness of TSrc after object-groups have been created 2011-01-13 10:34:36 -08:00
Vadim Kurland f684d791c6 refs #1919 Fixed: do not put interface objects inside object-group for TSrc 2011-01-13 10:11:30 -08:00
Vadim Kurland ba66447d7d refs #1919 do not put interface objects inside object-group for TSrc 2011-01-12 19:21:22 -08:00
Vadim Kurland 26b019cce8 refs #1919 do not put interface objects inside object-group for TSrc 2011-01-12 18:47:30 -08:00
Vadim Kurland 353ba61b7d refs #1907 ASA NAT - fwbuilder doesnt support multiple translated sources in a single NAT rule 2011-01-12 17:46:11 -08:00
Vadim Kurland e52b3b2db4 fixes #1913 added default log level 2011-01-12 16:27:00 -08:00
Vadim Kurland c9d0505af1 fixes #1912 Compiler error for ASA 8+ firewalls that have multiple networks in Policy rule and no network matches network zone 2011-01-12 16:03:06 -08:00
Vadim Kurland 77ae2185f2 refs #1908 "ASA NAT - cannot configure static NAT translations with (inside,outside)". Added radio buttons 2011-01-12 15:03:57 -08:00
Vadim Kurland a3d7e3d89b refs #1908 moved code that decides whether asa8 nat rule should be dynamic or static into its own class so it can be reused 2011-01-12 12:57:02 -08:00
Vadim Kurland 40d0a3cbb5 new build number 2011-01-12 09:11:58 -08:00
Vadim Kurland 57666a2c09 refs #1912 added test case 2011-01-12 09:03:49 -08:00
Vadim Kurland 31f6ddb86a refs #1907 refactoring to make it possible to use object-groups in both policy and nat compilers using the same code 2011-01-11 20:51:43 -08:00
Vadim Kurland c6abdb0fc6 refs #1908 : added nat rule option to force the rule to be "static"; new build number 2011-01-11 18:32:54 -08:00
Vadim Kurland e1230a0a14 new build 2011-01-11 11:03:16 -08:00
Vadim Kurland d4f9c04aeb refs #1902 Add NAT rule option "translate dns" for PIX 2011-01-11 10:55:53 -08:00
Vadim Kurland ff6f43b3e6 refs #1907 split converting to atomic rules in orer to be able to control it better 2011-01-11 10:27:10 -08:00
Vadim Kurland 8c7c07cfb9 fixes #1909 2011-01-11 09:44:13 -08:00
Vadim Kurland 9f03dc52b0 using qualified class names in the hope it will compile on windows 2011-01-10 22:48:17 -08:00
Vadim Kurland 7a01d5f955 build 3427 2011-01-10 17:39:18 -08:00
Vadim Kurland e17c19a0a3 fixed #1862 "fwb_pix crash". 2011-01-10 17:32:57 -08:00
Vadim Kurland 5bd095a95c fixed #1906 ASA NAT - Address objects are not properly identified by network zone and have the wrong real interface 2011-01-10 17:17:47 -08:00
Vadim Kurland 84a30873d5 refs #1905, #1879 2011-01-10 16:57:41 -08:00
Vadim Kurland 24ac2b56ac fixed #1905, #1879 2011-01-10 16:43:43 -08:00
Vadim Kurland 9a012af1f4 build 3426 2011-01-07 17:59:39 -08:00