Vadim Kurland
e149666e51
updated unit test data files
2011-05-14 22:16:46 -07:00
Vadim Kurland
25c887595a
updated unit test files to the latest DTD version
2011-05-05 22:10:05 -07:00
Vadim Kurland
18256f52ef
see #2275 fixed parser to make it understand multiport matches with negation
2011-04-15 18:49:31 -07:00
Vadim Kurland
fbf7f4e6da
see #2275 fixed parser to match a combination of any number of states separated by comma
2011-04-15 16:58:15 -07:00
Vadim Kurland
6185a88ceb
* iptables.g (multiport_tcp_udp_port_spec): see #2245 fixed bug in
...
parser for iptables that prevented correct import of iptables rules
using module "multiport" with port range matches.
2011-04-15 12:27:43 -07:00
Vadim Kurland
838116ab50
* IPTImporterRun.cpp (run): see #2275 Importer for iptables now
...
correctly handles both "intrapositioned" ("-s ! address") and
"extrapositioned" ("! -s address") negation.
2011-04-14 18:19:54 -07:00
Vadim Kurland
1a9eda04a9
see #2338 updated unit test files
2011-04-13 20:36:18 -07:00
Vadim Kurland
e9ffe7b67b
* iptables.g (comment): see #2336 Importer for iptables recognizes
...
version stored in the top comment by iptables-save and sets
version in the firewall object it creates.
2011-04-11 18:17:48 -07:00
Vadim Kurland
b1ad1cbec1
fixes #2299 improvements in the log format of iptables and iosacl importers
2011-04-05 21:11:37 -07:00
Vadim Kurland
72370646a6
checking in updated unit tests after changes in handling port ranges for IOS and changes for better deduplication of networks and address ranges in importer
2011-03-23 23:54:55 -07:00
Vadim Kurland
ff2b5eee62
* IPTImporter.cpp (pushPolicyRule): change in the importer
...
behavior: configuration import is aborted with an appropriate
error message in the log when program enounters protocol or
service name that it does not recognize and can not convert to
protocol or port number. We used to replace port number with some
placeholder (usually 0) and mark rule as "bad" by coloring it red
and adding comment.
2011-03-19 18:23:36 -07:00
Vadim Kurland
7cd22e0137
adding comment to address range objects
2011-03-16 15:51:49 -07:00
Vadim Kurland
9585288e9c
refactoring in the importer: all code that creates new objects moved to new classes. This provides good structure to add object deduplication
2011-03-16 13:20:59 -07:00
Vadim Kurland
de8921b32e
* Importer.cpp (addStandardRuleComment): see #2189 Program adds
...
the file name and the line number to comments of policy and nat
rules it creates during import.
2011-03-08 18:15:57 -08:00
Vadim Kurland
d60b82b47b
updated unit test for iptables importer
2011-03-08 17:46:42 -08:00
Vadim Kurland
98a21d7248
build 3496; updated unit test files
2011-03-06 19:21:06 -08:00
Vadim Kurland
cac6101e0f
fixes #2188 protocol "gre" could not be resolved to ip protocol number on Winbdows; implemented wrappers for getprotobyname() and getservbyname(), including protocol and tcp/udp service name resolution for cisco IOS and PIX; fixed unit tests for the importer
2011-03-06 12:47:20 -08:00
Vadim Kurland
222ff26e14
fixed unit test
2011-02-22 16:49:09 -08:00
Vadim Kurland
5a1b9d3b15
upgraded unit test data files
2011-02-22 16:06:41 -08:00
Vadim Kurland
71a94277a8
fixes #1985 implement FWObjectDatabase::setPredictableIds as virtual function
2011-01-25 16:38:35 -08:00
Roman Bovsunovsky
fb341e72a7
Moved all unit tests to src/unit_tests (refs #1826 )
2010-11-04 18:34:24 +02:00