onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-12 16:13:13 +02:00
Code Issues Releases Wiki Activity
4,347 Commits 3 Branches 3 Tags
d850139f2d8465dd5189bf020168d4bc75e0229d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland d850139f2d see #2554 "PF import: create groups of address objects for macros 
where possible". Importer for PF recognizes macros that define lists
of ip addresses, interfaces or host names and creates object groups
with the same name from them.  Only macros that contain at least one
ip address in the list are recognized.
 2011-07-07 16:17:27 -07:00
Vadim Kurland fff5775c39 new build 3558 2011-07-07 11:31:09 -07:00
Vadim Kurland 5544cd94d4 check if a macro used somewhere in the file to be imported is actually defined and abort if not 2011-07-07 11:16:48 -07:00
Vadim Kurland c4000fc0a2 set the flag to make importer add standard comments to rules and objects in unit test 2011-07-07 11:16:16 -07:00
Vadim Kurland 6f842f1b99 see #2551 making sure rules that have route-to option get the call to setRoute() in the importer 2011-07-07 11:04:45 -07:00
Vadim Kurland d98250b272 correct way to deal with object clipboard in unit tests; another patch from persgray@gmail.com 2011-07-06 18:42:14 -07:00
Vadim Kurland 758e96a7bb need to create clipboard object for unit tests 2011-07-06 18:34:14 -07:00
Vadim Kurland bde7cd1043 clear option "prolog_place" in compiler for iosacl to make sure function CompilerDriver::assembleFwScriptInternal() does not get confused if user switched fw platform 2011-07-06 18:06:11 -07:00
Vadim Kurland bc490dad17 another patch from persgray@gmail.com, making commandLinePrintingTest run on both Linux and BSD 2011-07-06 17:35:05 -07:00
Vadim Kurland e0be917ef2 * applied two patches by Vadim Zhukov persgray@gmail.com to 
replace calls to sprintf with safer calls to snprintf and fix some
compiler warnings.
 2011-07-06 16:43:38 -07:00
Vadim Kurland 6046524a37 see #2552 "PF import: add ability to suppress comments referring to 
line numbers in the original file".
 2011-07-06 16:13:59 -07:00
Vadim Kurland af95604f75 Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-07-06 14:37:24 -07:00
Vadim Kurland fd63078a5e see #2551 "PF Import - source routing rules are not imported with rule 
options set". Importer should import "route-to" rule parameters.
 2011-07-06 14:36:47 -07:00
Vadim Kurland aea0e07d28 new build 3557 2011-07-06 14:00:54 -07:00
Vadim Kurland 2914c7f81a * PFImporter.cpp (newAddressTableObject): see #2546 "PF import - 
negation inside of inline tables is ignored". We can not import
PF table definition that has some addresses negated.
 2011-07-06 12:45:16 -07:00
Vadim Kurland f45f9ccb4b * PFImporterRun.cpp (run): see #2550 "PF import - recursive macros 
are not supported". Importer for PF should interpret macro
definitions that use other macros. See #2545 "PF import error when
using macro names with same base name and incrementing digit
suffix". Importer should correctly interpret a macro that has name
of another macro as a substring of its own name.
 2011-07-06 12:14:06 -07:00
Vadim Kurland 54c16183e1 new build 3555 2011-06-29 18:46:57 -07:00
Vadim Kurland 1f420a97b0 new build 3554 2011-06-27 17:57:56 -07:00
Vadim Kurland 26b349482c build 3552 2011-06-22 16:19:02 -07:00
Vadim Kurland 404e15f24e fixes #2485 added tooltips for tagging and classification rule options 2011-06-22 15:57:26 -07:00
Vadim Kurland 5f93136e8f see #2518 renamed menu item 2011-06-22 15:41:34 -07:00
Vadim Kurland ae21e6228f see #2520 "Attached Network objects are not renamed if a firewall is 
renamed"
 2011-06-22 15:35:52 -07:00
Vadim Kurland 510e6897dd upgraded test files 2011-06-22 15:28:48 -07:00
Vadim Kurland d7a749154f see #2519 Avoid creating duplicate network objects for the 
AttachedNetwork object if the parent interface has multiple ip
addresses that belong to the same subnet.
 2011-06-22 15:25:18 -07:00
Vadim Kurland c940bed072 see #2521 "Compile fails if firewall has locked interface that is set 
to dynamic".
 2011-06-22 14:55:53 -07:00
Vadim Kurland 344a22feed see #2524 'avoid " {tcp udp icmp} " in place of protocol'. NAT 
compiler for PF does not need to generate protocol match "proto {tcp
udp icmp}" when service object used in the NAT rule is "any". The
reason this was done this way is lost in the mist of time; it's been
like this since very early versions of fwbuilder.
 2011-06-22 11:03:07 -07:00
Vadim Kurland 70a5b9ac7c see #2508 function TCPUDPService::cmp should make sure object passed as a argument is of compatible type before using; this fixes the crash 2011-06-20 17:49:57 -07:00
Vadim Kurland cebdfc5111 see #2500 object tree should have keyboard focus when new file is opened or new blank project window is created 2011-06-20 17:18:26 -07:00
Vadim Kurland 52fcfe3243 new build 3550 2011-06-20 16:38:39 -07:00
Vadim Kurland b8abb51339 see #2493 implemented "forward" function in addition to the "back" 
function, added a button to the roolbar, using new icons for Back and
Forward buttons.
 2011-06-20 16:30:53 -07:00
Vadim Kurland 212c57b3cf see #2489 removed custom stylesheet from the library selector widget, this made letters of the active item appear white. Text is now visible on the dark blue background and should work correctly regardless of the theme chosen by the user 2011-06-20 15:31:26 -07:00
Vadim Kurland f5e22c040b see #2477 removed transfer agent classes and functions 2011-06-20 14:56:28 -07:00
Vadim Kurland db233ee8e8 see #2506 removed incomplete and obsolete russian and japanese localization 2011-06-20 11:35:22 -07:00
Vadim Kurland e83df83543 using macro GENERATION to eliminate hard-coding of the version number 2011-06-09 21:32:01 -07:00
Vadim Kurland 07e902e0ac new build 2011-06-09 17:36:59 -07:00
Vadim Kurland 9505e2dcd0 see #2492 properly disabling dialog controls for the read-only IPServcie object 2011-06-09 16:46:09 -07:00
Vadim Kurland 9740d4a703 see #2490 enable/disable widgets based on the "read-only status of the object after they were enabled/disabled for other reasons 2011-06-09 16:38:01 -07:00
Vadim Kurland d682785b63 see #2496 parsing, but not importing, "user" and "group" matches 2011-06-09 16:33:22 -07:00
Vadim Kurland c77796ebd0 see #2497 added an error on import of "include" word in pf.conf files 2011-06-09 16:15:36 -07:00
Vadim Kurland 677173e030 see #2487 fixed crash that happened when user created new cluster from member firewalls that had locked interfaces 
;
 2011-06-09 14:01:17 -07:00
Vadim Kurland e4cf4d6447 see #2494 crash happened because class ObjectSignature did not have virtual function to build signature from UserService object 2011-06-09 12:15:59 -07:00
Vadim Kurland 0b46b5c0b9 see #2468 clean up filter/ilbrary box; moved buttons "new object" and "back" to the top toolbar 2011-06-06 19:15:05 -07:00
Vadim Kurland bd5212e0c6 fixed crash introduced recently 2011-06-06 18:32:23 -07:00
Vadim Kurland 57e3c5b0d3 see #2478 always draw rule sets on top of interfaces in the tree 2011-06-06 15:23:46 -07:00
Vadim Kurland f0a0abb338 see #2486 centered firewall / policy text 2011-06-06 15:04:55 -07:00
Vadim Kurland 17a178b637 see #2482 now can import rules that match both source and destination ports, including cases where groups of ports are used on both sides 2011-06-06 14:55:00 -07:00
Vadim Kurland 9921fe8f78 see #2481 added an error message for port "!=" operation. Importer still tries to import the rule but marks it as "bad" 2011-06-06 13:32:22 -07:00
Vadim Kurland c9211157ff see #2463 implemented import of "scrub" commands in both old and new syntax 2011-06-02 19:02:09 -07:00
Vadim Kurland a0da65ddc9 see #2464 implemented import of PF "set timeout", 
"set limit" and other "set" commands. Known limitations:

 - commands "set ruleset-optimization", "set loginterface",
   "set block-policy", "set state-defaults", "set require-order",
   "set fingerprints", "set reassemble", "set hostid" are not supported.
 2011-06-02 17:18:37 -07:00
Vadim Kurland 68a29785da see #2394 matching icmp types and codes by name explicitly to avoid conflicts where the same keyword (e.g. "skip") is used in different rules of the grammar; see #2464 added test case for "set timeout" commands 2011-06-02 16:13:23 -07:00
Vadim Kurland b9dfdd5d2c split ifconfig.g to keep linux and bsd grammars separate 2011-06-01 16:55:52 -07:00
Vadim Kurland 68bc1ec263 see #2394 populating policy rules with services 2011-05-26 18:45:05 -07:00
Vadim Kurland cc7fb3c1b0 fixing typo 2011-05-26 14:42:18 -07:00
Vadim Kurland a814b38c0f Merge branch 'pf_import' into development 2011-05-26 14:29:45 -07:00
Vadim Kurland ca77bbb51c re-ran tests for iptables 2011-05-26 14:29:14 -07:00
Vadim Kurland a544492ced see #2434 "PF compiler should use 'self' keyword where 
appropriate". Compiler for PF now uses keyword 'self' in rules
where firewall object is used in Source or Destination.
 2011-05-26 14:13:26 -07:00
Vadim Kurland 29bf29f892 see #2394 grammar clean-up; creating policy rules in the right ruleset and renumbering rule set in the end 2011-05-26 12:06:50 -07:00
Vadim Kurland ea9c28fda1 See #2394 grammar can parse most of the sample pf.conf files, including important ones 2011-05-25 18:57:44 -07:00
Vadim Kurland db8ae42ad1 grammar matches port ranges; better grammar for ipv6 2011-05-23 19:03:49 -07:00
Vadim Kurland af8031a87a building with mingw on windows 2011-05-19 19:22:58 -07:00
Vadim Kurland 8c4fd89855 upgraded large_policy_test.fwb, added test case for branch rules and Classify 2011-05-16 14:09:36 -07:00
Vadim Kurland 598b83cac3 fixes #2398 remove checkbox "make tag and classify actions terminating" 2011-05-12 18:48:11 -07:00
Vadim Kurland bcd860d889 see #2397 get rid of unnecessary chains and make sure terminating action (e.g. Accept) is added after targets generated for all non-terminating options (Tag, Classify and Route) 2011-05-12 18:43:31 -07:00
Vadim Kurland 40e08b70d1 added release notes 4.2.2 2011-05-11 14:02:03 -07:00
Vadim Kurland 38540cec7c merge from development 4.2.1.3540 2011-05-09 17:08:17 -07:00
Vadim Kurland ceb6904e06 build 3540 2011-05-09 11:47:09 -07:00
Vadim Kurland 4fde5344e9 fixes #2393 "broken link in the "Help / Firewall Builder Help" dialog" 
build number 3540
 2011-05-09 11:46:23 -07:00
Vadim Kurland 3b70160562 * FWCmdAddObject.cpp (redo): fixes #2391 "selecting 'new library' 
when editor panel not on 'editor' tab causes crash"
 2011-05-09 11:27:57 -07:00
Vadim Kurland 8773642198 see #2367 merge from development 2011-05-05 19:16:47 -07:00
Vadim Kurland 282102e03f Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-05-05 18:50:59 -07:00
Vadim Kurland e24a73a560 see #2385 "PF action Classify uses 
wrong parameter". This change fixes a bug introduced in 4.2.0
that affects rules with action Classify in PF firewalls.
 2011-05-05 18:50:32 -07:00
Vadim Kurland 7232a2195b see #2385 bumped XML DTD version to 21 to make room for the transformation to fix bug #2385. That will be done in branch development 2011-05-05 12:01:18 -07:00
Vadim Kurland c096684c20 see #2367 merged latest changes from development branch; this merged transformation for v18->v19 XML file upgrades; upgraded test files for PF 2011-05-04 16:44:08 -07:00
Vadim Kurland afef4b39c1 bumped dtd version to 20 and renamed xslt upgrade script since dtd version increased to 19 in the development branch 2011-05-04 15:54:15 -07:00
Vadim Kurland d14a984f85 * FWObjectDatabase_18.xslt: XSLT transformation to upgrade data 
files from DTD v18 to DTD v19. This transformation finds
"PolicyRule" elements with missing "Itf" child elements and fixes
them by adding such element with a reference pointint to "any".
Fixes #2383

* fwbuilder.dtd.in: Element "Itf" (an interface) of "PolicyRule"
should be required. DTD version increment.
 2011-05-04 15:23:46 -07:00
Vadim Kurland 64e860a025 see #2367 attempt at iptables support for tag, classify and route options 2011-05-02 18:50:03 -07:00
Vadim Kurland 3c276bc40b see #2367 using QComboBox to choose between "none", "queue" and "pipe" for ipfw classification 2011-05-02 14:34:34 -07:00
Vadim Kurland 7feb2f4731 show tag service object name in the Options column 2011-05-02 13:39:14 -07:00
Vadim Kurland 4e6b10cbc9 draw text line aligned with the icon in action and direction columns 2011-05-02 13:36:15 -07:00
Vadim Kurland 629b0b31e2 see #2367 removed actions Tag, Classify, Route and added options instead; added functions to class PolicyRule to check and set these options; replaced checks for those actions with calls to the functions everywhere. 2011-04-27 18:44:38 -07:00
Vadim Kurland 339079da7b * instDialog_ui_ops.cpp (readInstallerOptionsFromDialog): 
tentative fix for SF bug 3169045 "Batch installer lists IPv4
address as management address". Built-in installer wanted to use
management interface address in batch mode even when alternative
address or putty session name was provided. This happens only in
batch mode install.
 2011-04-25 12:00:54 -07:00
Vadim Kurland 856126c1cc started 4.2.1 2011-04-25 11:58:14 -07:00
Vadim Kurland 50c7ca58f3 updated release notes 2011-04-19 17:25:44 -07:00
Vadim Kurland 752b2e3ae0 fixes #2358 should say "outbound interface" rather than "inbound" 2011-04-19 14:21:28 -07:00
Vadim Kurland 9ba2dc42ee * RoutingCompiler_ipt.cpp (compile): see #2359 "Crash when 
compiling single rule with IPv6 destination and IPv4 gateway or
interface". Routing compiler for iptables does not support ipv6 at
this time and will issue a warning when user tries to place ipv6
address or network in a routing rule. The warning does not appear
when ipv6 address is a member of a group used in the rule. Also
see #1575.
 2011-04-19 14:18:33 -07:00
Vadim Kurland b2a0a511f3 fixed install of fwbedit on windows 2011-04-19 10:39:39 -07:00
Vadim Kurland 742754d0e2 remove redundant paragraph we both do not like 2011-04-18 16:50:06 -07:00
Vadim Kurland 299bb687cb fixes #2357 rules should be sorted in the "where used" output 2011-04-18 16:49:44 -07:00
Vadim Kurland 6ddcd212ad fixed #2357 "rules should be sorted in the "where used" output" 2011-04-18 15:18:56 -07:00
Vadim Kurland 2bde26e65a fixed dialog layout; see #2356 2011-04-18 15:00:14 -07:00
Vadim Kurland d066f567f5 * IPTImporter.cpp (pushPolicyRule): see #2338 "Empty Mangle Policy 
object created on import". Iptables rules in the table mangle
will be imported in the dedicated Policy rule set with name
"Mangle". Rules that use chains FORWARD and POSTROUTING in table
mangle can not be reproduced and will be marked as "bad" (color
red and corresponding comment).
 2011-04-13 19:09:30 -07:00
Vadim Kurland 457fcd1660 see #2344 disabled ntp configuraton when host os is FWSM 2011-04-13 17:24:55 -07:00
Vadim Kurland aa6be186da see #2345 updated test files 2011-04-13 17:11:43 -07:00
Vadim Kurland c93421f0e3 * OSConfigurator_pix_os.cpp (_printSysopt): see #2345 More fixes for 
FWSM 4.x: "service resetoutbound", "timeout xlate", "timeout sunrpc"
 2011-04-13 17:10:16 -07:00
Vadim Kurland 0e303fe444 see #2343 updated unit tests 2011-04-13 15:42:51 -07:00
Vadim Kurland 6cc059b91c * OSConfigurator_pix_os.cpp (_printInterfaceConfiguration): see #2343 
"Interface nameif error when installing generated config for FWSM".
Use correct  "nameif" command sytax  in FWSM 2.x and 4.x.
 2011-04-13 15:33:50 -07:00
Vadim Kurland 074aae6427 see #2341 
fixed XML error introduced with FWSM config  import; build 3525
 2011-04-13 15:18:09 -07:00
Vadim Kurland 5c07a81c7b * OSConfigurator_pix_os.cpp (_printSSHConfiguration): see #2344 
"FWSM install errors for clear commands". Using correct syntax for
"clear" commands for FWSM v4.x
 2011-04-13 12:27:52 -07:00
Vadim Kurland 909470a0bf see #1548 working on deduplication of network objects 2011-03-23 22:16:18 -07:00
Vadim Kurland 97061f54f0 fixes #2269 using non-versioned path in the settings .ini file for the GUID 2011-03-23 17:45:11 -07:00