Vadim Kurland
909470a0bf
see #1548 working on deduplication of network objects
2011-03-23 22:16:18 -07:00
Vadim Kurland
97061f54f0
fixes #2269 using non-versioned path in the settings .ini file for the GUID
2011-03-23 17:45:11 -07:00
Vadim Kurland
ee35e66818
fixed SF bug 3238026: build
...
failure on systems without net-snmp development libraries.
2011-03-23 16:33:54 -07:00
Vadim Kurland
247d4efd61
commiting merge
2011-03-12 14:53:12 -08:00
Vadim Kurland
d3bf44b4d5
re-ran tests for pix
2011-03-12 14:44:47 -08:00
Vadim Kurland
2fa922d8b2
re-ran tests for ipfw
2011-03-11 09:19:03 -08:00
Vadim Kurland
9b4edad92f
re-ran tests for ipf
2011-03-11 09:17:49 -08:00
Vadim Kurland
984a84ea2f
Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development
2011-03-10 21:10:11 -08:00
Vadim Kurland
7986214d4d
re-ran pf tests and updated files
2011-03-10 21:09:54 -08:00
Vadim Kurland
f7fdf1fbc5
see #2163 converting snmp network discovery wizard
2011-03-02 15:48:10 -08:00
Vadim Kurland
e1a91dfeac
see #2163 refactored code that implements two-panel object selection to a separate widget so it can be reused in multiple wizards
2011-03-02 12:06:26 -08:00
Vadim Kurland
5f3900e07e
better regexp to match /etc/hosts lines with multiple names
2011-03-02 11:10:23 -08:00
Vadim Kurland
98a2f51d52
see #2047
...
Do not
pass full path to the output file as an argument of the "-o"
option when the GUI launches policy compiler. Since the "-d"
option passes directory path where files sould be saved, actual
file names do not need to be absolute path, except if the user
entered absolute path for the output file name in the firewall
settings dialog.
2011-02-24 18:55:55 -08:00
Vadim Kurland
5b3160267d
* configlets/freebsd/installer_commands_root: see #2143 "installer
...
should run /etc/rc.d/pf script to reload PF rules on FreeBSD when
generated script is in rc.conf format"
2011-02-24 17:28:57 -08:00
Vadim Kurland
98c9799584
see #2137 delete ip address first, then add new one, but only if the interface is a carp interface
2011-02-24 15:35:44 -08:00
Vadim Kurland
1767f5a86c
see #2126 added regex for old PIX
2011-02-24 14:36:45 -08:00
Vadim Kurland
9882abbcd8
see #2136 change font used to show the name of the cluster object in the tree when it needs recompile
2011-02-24 14:18:22 -08:00
Vadim Kurland
5a1b9d3b15
upgraded unit test data files
2011-02-22 16:06:41 -08:00
Vadim Kurland
85dad674bf
new build 3485
...
* configlets/linux24/shell_functions: see #2130 "unnecessary
output when iptables script runs on the firewall". Ever since I
switched to using "command" to verify that various system
utilities generated script needs are present and can be used, the
scirpt produced extra lines in the log printing full path and
names to /usr/bin/logger, /sbin/ip etc. These lines are
unnecessary and should not be there. This problem was introduced
some time during the work on 4.2.0
2011-02-22 15:26:06 -08:00
Vadim Kurland
7bf0f8a4f4
see #2129
...
deprecate "test install" function. We have decided to deprecate test install because it is rather heavy-handed on Linux and PIX where it reboots the firewall and plain does not work on *BSD.
2011-02-22 15:12:26 -08:00
Vadim Kurland
4adafeb105
fixes #2033 Clarify platform selection for ASA/PIX
2011-02-09 16:36:14 -08:00
Vadim Kurland
16a51265ec
see #1931 added newlines between "PArser error" and other parts of the combined error message
2011-02-09 16:13:09 -08:00
Vadim Kurland
02ae23b197
fixes #1915 tooltip shown when mouse is over rule number should be added to the list of suppressed tooltips when "Advanced user mode" is in effect
2011-02-09 14:54:18 -08:00
Vadim Kurland
3c966ffc31
see #2064 CARP interfaces are not properly installed on FreeBSD cluster. Need to populate failover group objects with default values when they are created
2011-02-09 14:34:14 -08:00
Vadim Kurland
77ea506d63
* configlets/freebsd/installer_commands_root: fixes #2065
...
"activation commands on FreeBSD and OpenBSD lose script exit
status". Sequence of commands ran by the built-in installer on
*BSD firewalls were losing exit status of the script which meant
installer always declared installation a "success" even when
there were errors.
2011-02-09 12:33:34 -08:00
Vadim Kurland
faa4147b68
new build 3463
2011-02-07 19:44:02 -08:00
Vadim Kurland
87c8fcb2ac
fixes #1914 Address table object file name is not created properly if user clicks outside Editor panel
2011-02-07 17:50:22 -08:00
Vadim Kurland
ee1ed26c14
fixes #2011 no screening on Firewall name characters: do not allow character "/" in firewall and cluster names
2011-02-07 17:35:58 -08:00
Vadim Kurland
954e12b1c5
fixes #2010 Compiled rule hidden by the output panel
2011-02-07 17:29:28 -08:00
Vadim Kurland
d18427a9cc
see #2048 PF compiler doesnt detect duplicate entries in Routing policy; added rule elements to catch and suppress duplicate routing commands
2011-02-07 17:06:42 -08:00
Vadim Kurland
b244b5ff4d
fixes #2045 static route IDs used in rc.conf file must be stable
2011-02-07 15:17:36 -08:00
Vadim Kurland
bef9936ed5
making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line
2011-02-07 15:00:36 -08:00
Vadim Kurland
e442d4521e
see #1888 Added second input field for the conf file name, refatoring in CompilerDriver_pf to use QString mostly; The name of the generated .fw file is still taken from the -o option rather than output_file firewall option
2011-02-01 14:27:30 -08:00
Vadim Kurland
e00c2cd41e
build 3456
2011-01-31 18:49:08 -08:00
Vadim Kurland
78e177f759
see #1890 re-ran tests
2011-01-31 18:38:08 -08:00
Vadim Kurland
dd86fcc5e2
see #1890 "Add
...
support for configuring static routes on BSD". Implemented support
for simple static routing rules. ECMP and routing via interface
(routing to directly reachable subnets) are not
supported. Generated script preserves static routing entries that
existed before and attempts to recover in case of error. Needs
testing.
2011-01-31 18:29:20 -08:00
Vadim Kurland
4d29ba9a6c
new build 3448
2011-01-26 13:54:18 -08:00
Vadim Kurland
eb61a51c89
fixes #1989 :
...
Got rid
of global variables sysfname, tempfname, librespath, respath and
localepath; will now use class Constants to keep this information.
2011-01-26 13:27:57 -08:00
Vadim Kurland
c1662a70b9
new build 3446
2011-01-24 18:37:44 -08:00
Vadim Kurland
d331ee7840
fixes #1966 IOSACL: object-group can get name that consists of only suffix
2011-01-24 18:28:48 -08:00
Vadim Kurland
498d9456ca
see #1980 Objects from Deleted Objects should not be allowed to be used in rules
2011-01-24 17:09:49 -08:00
Vadim Kurland
7c1108204e
see #1958 consistently use "exit" to get out of nested context in pix config
2011-01-24 16:41:34 -08:00
Vadim Kurland
7e7f5509d2
see #1970 ASA Policy - single IPv6 icmp object allowed in rules
2011-01-24 16:33:43 -08:00
Vadim Kurland
83ac66edff
see #1970 1) suppress rules that hold ipv6 objects from policy and nat rule sets because we do not support ipv6 at this time 2) moved rule processor dropRuleWithEmptyRE to class Compiler to avoid duplication of code
2011-01-24 14:42:06 -08:00
vadim
7a485614ae
removed SHORTVERSION everywhere
2010-12-29 15:26:20 -08:00
vadim
51fa3ce866
moved common definitions to unix scope
2010-12-29 13:12:10 -08:00
vadim
aa1235c18f
added m4 macros
2010-12-13 15:13:00 -08:00
vadim
1c94d730e6
added m4 macros
2010-12-13 15:12:41 -08:00
Vadim Kurland
09f8bee6c5
New build number is 3408
2010-11-03 23:57:57 -07:00
Vadim Kurland
8c56dcdbe1
refs #1804 With 2 files open and object trees undocked you cannot open objects from both object trees
2010-10-08 00:09:27 +00:00
Vadim Kurland
9ccdd5d4a3
fixed #1802 Update New Firewall wizard help text for interfaces
2010-10-07 23:45:33 +00:00
Vadim Kurland
91cbb75a17
fixed #1801 Update Creating new host object help text
2010-10-07 22:45:52 +00:00
Vadim Kurland
4fa4ce5cac
using command "terminal width 256" to turn off ANSI commands in
...
the PIX command echo.
2010-10-07 22:41:14 +00:00
Vadim Kurland
9a64de05d9
* FindObjectWidget.cpp (showObject): rolled back change done in
...
r3320 (refs #1790 ) "When an object is found using Find and the
object is in the object tree, the keyboard focus shifts to the
Object Panel". That change broke highlighting of the found object
in rules.
2010-10-07 22:02:38 +00:00
Vadim Kurland
be1726532b
refs #336 setting timeouts in the template object
2010-10-07 19:56:18 +00:00
Vadim Kurland
b9b3749d4c
refs #336 changelog and release notes update
2010-10-07 19:11:20 +00:00
Vadim Kurland
6156ac9cbe
refs #336 Need template for PIX firewall; added tmplate for PIX 50X
2010-10-07 19:08:58 +00:00
Vadim Kurland
a6fdcb02a4
changelog records
2010-10-07 03:29:28 +00:00
Vadim Kurland
76c73561ba
flag WindowCloseButtonHint is only available in Qt 4.5 and later
2010-10-07 03:25:54 +00:00
Vadim Kurland
24c222a0a4
fixed #1710 unit tests to test generated file names, manifest and activation commands for compilers for PF and ipfw
2010-10-07 01:14:19 +00:00
Vadim Kurland
9475e71877
need to escape file name and path if it has spaces
2010-10-07 01:14:01 +00:00
Vadim Kurland
44a525b670
fixed #1788 Modify text in Replace icon drop area
2010-10-06 22:56:00 +00:00
Vadim Kurland
2b60dcac8e
fixed #1783 "PIX routing entries require interface, but PIX
...
config will compile without interface in Routing rule". Policy
compiler for PIX now checks that both "interface" and "gateway"
rule elements are not empty.
2010-10-06 22:41:43 +00:00
Vadim Kurland
966fad1749
fixed #1792 address column header in InterfaceEditorWidget should say "IP Address"
2010-10-06 21:34:01 +00:00
Vadim Kurland
4e56d710f9
setting an icon for the dialog using standard method
2010-10-06 21:04:52 +00:00
Vadim Kurland
2ca6654855
correct return type in regCheck()
2010-10-06 01:24:24 +00:00
Vadim Kurland
48a8c9ff79
added eval warning dialog refs #1727
2010-10-06 01:04:35 +00:00
Vadim Kurland
1141ee6223
added log graphics; not used right now
2010-10-05 23:52:18 +00:00
Vadim Kurland
62dac9e362
fixed SF bug 3077132 "no PREROUTING rule with
...
*-Interface". Rules matching addresses of a wildcard interface
(e.g. "ppp*") were not properly generated.
2010-10-05 23:05:19 +00:00
Vadim Kurland
a72e592bf3
fixed unit tests for the fix for SF bug 3039681
2010-10-05 21:21:30 +00:00
Vadim Kurland
4b1ecbfc93
added test cases for SF bug 3077132
2010-10-05 19:40:29 +00:00
Vadim Kurland
dd6a245bc3
fixed SF bug 3039681 "context-menu items inconsistent for
...
Single/Multiple rules". When several rules are selected in rule
set, some context menu itmes should turn to plural.
2010-10-05 19:24:59 +00:00
Vadim Kurland
4f5a64b570
fixed #1778 "main menu Rules should have the same items that
...
context RuleSetView menu when no rules are selected"
2010-10-05 19:02:16 +00:00
Vadim Kurland
a66b039af9
fixed #1777 "scroll new fw object to the top of the tree view
...
panel once its created". This has side effect in that some
other operations that open an object in the tree will also
scroll the tree to position this object at the top.
2010-10-05 02:32:12 +00:00
Vadim Kurland
05568ccbc0
fixed #1791 "Add preference flag to enable / disable the Custom
...
templates button on the New Firewall Wizard". Use of the
custom template library to create new firewall object is now
optional, controlled by a checkbox in the "Object" tab of the
gobal preferenes dialog. New users will have this option turned
off by default, however existing users will see it enabled for
backwards compatibility.
2010-10-05 02:15:37 +00:00
Vadim Kurland
10862bdfed
fixed #1790 "When an object
...
is found using Find and the object is in the object tree, the
keyboard focus shifts to the Object Panel". The "find" pabel now
retains keyboard focus after it shows found object in the tree,
this allows the user to just hit Enter on the keyboard to find
the next object.
2010-10-05 01:23:39 +00:00
Vadim Kurland
d079f0f445
fixed #1785 Deleting graphic icon of object from Find tab should also remove the text name or label
2010-10-05 01:11:35 +00:00
Vadim Kurland
9a097d18c9
fixed #1770 Eliminated pause
...
that happened when user switched from page 0 to page 1 of the new
firewall wizard. Pause was caused by the DNS queries the program
ran trying to determine ip address of the firewall using the name
provided on the first page of the wizard. Now DNS query is
launched only if user wants to create interfaces uses snmp scan.
2010-10-05 00:24:32 +00:00
Vadim Kurland
7ccb7a1e38
fixed crash that happened when user tried to use context menu item Duplicate
2010-10-04 23:46:33 +00:00
Vadim Kurland
cee564ac89
fixed #1772
...
improved design of the widget used to edit ip addresses and other
attributes of an interface in the new firewall, new host and new
cluster wizards. Removed "MAC Address" imput field and rearranged
other input fields according to the result of usability tests.
2010-10-04 23:37:38 +00:00
Vadim Kurland
053ac47849
refs #1787 trying to make obj_name have keyboard focus when new firewall wizard opens, does not work so far
2010-10-04 22:52:23 +00:00
Vadim Kurland
f9372b04a1
fixed bug introduced with library switcher reimplementation: it should be possible to duplicate an object into the same library
2010-10-04 22:29:06 +00:00
Vadim Kurland
d845c3f0ea
fixed #1784 added Cisco ASA (PIX) error
...
message "cannot add route entry" to the list of errors that
built-in installer recognizes and marks install process as
"Failure".
2010-10-04 22:22:58 +00:00
Vadim Kurland
e899075231
fixed #1769 change interface type text in the interface editor widget; also fixed the code that turns off intro dialog in unit tests
2010-10-04 22:13:07 +00:00
Vadim Kurland
20a3ae73bf
fixed #1768 Add title and subheaders to all pages of the new firewall wizard; subtitles on pages are difficult to formulate since some pages already have explanations that are sufficient
2010-10-04 21:57:21 +00:00
Vadim Kurland
15818d1837
fixed #1767 improved UI in the new firewall and new host dialogs
...
where user chooses file for the custom template library or uses
standard template library.
2010-10-04 21:23:58 +00:00
Vadim Kurland
f77e2d35b8
fixed #1766 change prompt text in the first page of the new firewall wizard
2010-10-04 20:48:26 +00:00
Vadim Kurland
8aa32e61d6
refs #1779 , #1765 , #1764 , #1763 using a/b testing facility to show different quick start guides to different users; dialog that invites user to watch quick start guide turns itself off after 5 starts of the program
2010-10-04 19:51:46 +00:00
Vadim Kurland
2f57774292
disable "intro" dialog on the startup in unit tests
2010-10-04 18:26:41 +00:00
Vadim Kurland
de60a2d16f
updated release notes
2010-10-04 01:56:16 +00:00
Vadim Kurland
e162a0c6b3
fixed #1776 once new firewall is created, automatically open its Policy
2010-10-04 01:52:22 +00:00
Vadim Kurland
ad6cfe82ea
* FWWindow.cpp (FWWindow::showIntroDialog): fixed #1765 , #1779
...
Move quick start guide to the web site. The "Quick Start Guide" is
now part of the web site and the GUI only shows a
dialog-invitation to watch it.
2010-10-04 01:37:57 +00:00
Vadim Kurland
8f56bc6384
added front page to the introduction guide
2010-10-01 19:25:53 +00:00
Vadim Kurland
562b904da9
fixed #1763 Implemented
...
basic facility for A/B testing within the GUI
2010-10-01 19:09:02 +00:00
Vadim Kurland
46c10debda
fixed #1755 "hitting enter after editing search attribute in the
...
Find panel should trigger search"
2010-10-01 02:21:20 +00:00
Vadim Kurland
9665b619d7
fixed #1760 Search by attribute "name" should search by name or label
2010-10-01 02:02:30 +00:00
Vadim Kurland
5ba94e3b3b
fixed #1757 Allow searching by attributes even after an object
...
is dropped into the drop area in search panel.
2010-10-01 01:51:41 +00:00
Vadim Kurland
7a389e9c7d
fixed #1759 "Use default template library" button seems to do
...
nothing. This button should only be enabled if user switched to
their own library of template objects. The button should be
disabled if they switched back to the standard template library
or never switched to their own one.
2010-10-01 01:38:06 +00:00
Vadim Kurland
73752d58d9
fixed #1754 Disable "Find" context menu item for system folders
2010-10-01 01:20:25 +00:00
Vadim Kurland
c347ca4735
fixed #1756 Change prompt in the drop areas of the search panel
2010-10-01 01:10:06 +00:00