Commit Graph
100 Commits
Author SHA1 Message Date
Vadim Kurland 909470a0bf see #1548 working on deduplication of network objects 2011-03-23 22:16:18 -07:00
Vadim Kurland 97061f54f0 fixes #2269 using non-versioned path in the settings .ini file for the GUID 2011-03-23 17:45:11 -07:00
Vadim Kurland ee35e66818 fixed SF bug 3238026: build
failure on systems without net-snmp development libraries.
2011-03-23 16:33:54 -07:00
Vadim Kurland 247d4efd61 commiting merge 2011-03-12 14:53:12 -08:00
Vadim Kurland d3bf44b4d5 re-ran tests for pix 2011-03-12 14:44:47 -08:00
Vadim Kurland 2fa922d8b2 re-ran tests for ipfw 2011-03-11 09:19:03 -08:00
Vadim Kurland 9b4edad92f re-ran tests for ipf 2011-03-11 09:17:49 -08:00
Vadim Kurland 984a84ea2f Merge branch 'development' of ssh://vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-03-10 21:10:11 -08:00
Vadim Kurland 7986214d4d re-ran pf tests and updated files 2011-03-10 21:09:54 -08:00
Vadim Kurland f7fdf1fbc5 see #2163 converting snmp network discovery wizard 2011-03-02 15:48:10 -08:00
Vadim Kurland e1a91dfeac see #2163 refactored code that implements two-panel object selection to a separate widget so it can be reused in multiple wizards 2011-03-02 12:06:26 -08:00
Vadim Kurland 5f3900e07e better regexp to match /etc/hosts lines with multiple names 2011-03-02 11:10:23 -08:00
Vadim Kurland 98a2f51d52 see #2047
Do not
pass full path to the output file as an argument of the "-o"
option when the GUI launches policy compiler. Since the "-d"
option passes directory path where files sould be saved, actual
file names do not need to be absolute path, except if the user
entered absolute path for the output file name in the firewall
settings dialog.
2011-02-24 18:55:55 -08:00
Vadim Kurland 5b3160267d * configlets/freebsd/installer_commands_root: see #2143 "installer
should run /etc/rc.d/pf script to reload PF rules on FreeBSD when
generated script is in rc.conf format"
2011-02-24 17:28:57 -08:00
Vadim Kurland 98c9799584 see #2137 delete ip address first, then add new one, but only if the interface is a carp interface 2011-02-24 15:35:44 -08:00
Vadim Kurland 1767f5a86c see #2126 added regex for old PIX 2011-02-24 14:36:45 -08:00
Vadim Kurland 9882abbcd8 see #2136 change font used to show the name of the cluster object in the tree when it needs recompile 2011-02-24 14:18:22 -08:00
Vadim Kurland 5a1b9d3b15 upgraded unit test data files 2011-02-22 16:06:41 -08:00
Vadim Kurland 85dad674bf new build 3485
* configlets/linux24/shell_functions: see #2130 "unnecessary
output when iptables script runs on the firewall". Ever since I
switched to using "command" to verify that various system
utilities generated script needs are present and can be used, the
scirpt produced extra lines in the log printing full path and
names to /usr/bin/logger, /sbin/ip etc. These lines are
unnecessary and should not be there. This problem was introduced
some time during the work on 4.2.0
2011-02-22 15:26:06 -08:00
Vadim Kurland 7bf0f8a4f4 see #2129
deprecate "test install" function. We have decided to deprecate test install because it is rather heavy-handed on Linux and PIX where it reboots the firewall and plain does not work on *BSD.
2011-02-22 15:12:26 -08:00
Vadim Kurland 4adafeb105 fixes #2033 Clarify platform selection for ASA/PIX 2011-02-09 16:36:14 -08:00
Vadim Kurland 16a51265ec see #1931 added newlines between "PArser error" and other parts of the combined error message 2011-02-09 16:13:09 -08:00
Vadim Kurland 02ae23b197 fixes #1915 tooltip shown when mouse is over rule number should be added to the list of suppressed tooltips when "Advanced user mode" is in effect 2011-02-09 14:54:18 -08:00
Vadim Kurland 3c966ffc31 see #2064 CARP interfaces are not properly installed on FreeBSD cluster. Need to populate failover group objects with default values when they are created 2011-02-09 14:34:14 -08:00
Vadim Kurland 77ea506d63 * configlets/freebsd/installer_commands_root: fixes #2065
"activation commands on FreeBSD and OpenBSD lose script exit
status". Sequence of commands ran by the built-in installer on
*BSD firewalls were losing exit status of the script which meant
installer always declared installation a "success" even when
there were errors.
2011-02-09 12:33:34 -08:00
Vadim Kurland faa4147b68 new build 3463 2011-02-07 19:44:02 -08:00
Vadim Kurland 87c8fcb2ac fixes #1914 Address table object file name is not created properly if user clicks outside Editor panel 2011-02-07 17:50:22 -08:00
Vadim Kurland ee1ed26c14 fixes #2011 no screening on Firewall name characters: do not allow character "/" in firewall and cluster names 2011-02-07 17:35:58 -08:00
Vadim Kurland 954e12b1c5 fixes #2010 Compiled rule hidden by the output panel 2011-02-07 17:29:28 -08:00
Vadim Kurland d18427a9cc see #2048 PF compiler doesnt detect duplicate entries in Routing policy; added rule elements to catch and suppress duplicate routing commands 2011-02-07 17:06:42 -08:00
Vadim Kurland b244b5ff4d fixes #2045 static route IDs used in rc.conf file must be stable 2011-02-07 15:17:36 -08:00
Vadim Kurland bef9936ed5 making lists of interface configuration commands come out in a stable order, sorted by interface name; added test cases for vlan interfaces in shell and rc.conf formats; added vlan interfaces to cloned_interfaces line 2011-02-07 15:00:36 -08:00
Vadim Kurland e442d4521e see #1888 Added second input field for the conf file name, refatoring in CompilerDriver_pf to use QString mostly; The name of the generated .fw file is still taken from the -o option rather than output_file firewall option 2011-02-01 14:27:30 -08:00
Vadim Kurland e00c2cd41e build 3456 2011-01-31 18:49:08 -08:00
Vadim Kurland 78e177f759 see #1890 re-ran tests 2011-01-31 18:38:08 -08:00
Vadim Kurland dd86fcc5e2 see #1890 "Add
support for configuring static routes on BSD". Implemented support
for simple static routing rules. ECMP and routing via interface
(routing to directly reachable subnets) are not
supported. Generated script preserves static routing entries that
existed before and attempts to recover in case of error. Needs
testing.
2011-01-31 18:29:20 -08:00
Vadim Kurland 4d29ba9a6c new build 3448 2011-01-26 13:54:18 -08:00
Vadim Kurland eb61a51c89 fixes #1989:
Got rid
of global variables sysfname, tempfname, librespath, respath and
localepath; will now use class Constants to keep this information.
2011-01-26 13:27:57 -08:00
Vadim Kurland c1662a70b9 new build 3446 2011-01-24 18:37:44 -08:00
Vadim Kurland d331ee7840 fixes #1966 IOSACL: object-group can get name that consists of only suffix 2011-01-24 18:28:48 -08:00
Vadim Kurland 498d9456ca see #1980 Objects from Deleted Objects should not be allowed to be used in rules 2011-01-24 17:09:49 -08:00
Vadim Kurland 7c1108204e see #1958 consistently use "exit" to get out of nested context in pix config 2011-01-24 16:41:34 -08:00
Vadim Kurland 7e7f5509d2 see #1970 ASA Policy - single IPv6 icmp object allowed in rules 2011-01-24 16:33:43 -08:00
Vadim Kurland 83ac66edff see #1970 1) suppress rules that hold ipv6 objects from policy and nat rule sets because we do not support ipv6 at this time 2) moved rule processor dropRuleWithEmptyRE to class Compiler to avoid duplication of code 2011-01-24 14:42:06 -08:00
vadim 7a485614ae removed SHORTVERSION everywhere 2010-12-29 15:26:20 -08:00
vadim 51fa3ce866 moved common definitions to unix scope 2010-12-29 13:12:10 -08:00
vadim aa1235c18f added m4 macros 2010-12-13 15:13:00 -08:00
vadim 1c94d730e6 added m4 macros 2010-12-13 15:12:41 -08:00
Vadim Kurland 09f8bee6c5 New build number is 3408 2010-11-03 23:57:57 -07:00
Vadim Kurland 8c56dcdbe1 refs #1804 With 2 files open and object trees undocked you cannot open objects from both object trees 2010-10-08 00:09:27 +00:00
Vadim Kurland 9ccdd5d4a3 fixed #1802 Update New Firewall wizard help text for interfaces 2010-10-07 23:45:33 +00:00
Vadim Kurland 91cbb75a17 fixed #1801 Update Creating new host object help text 2010-10-07 22:45:52 +00:00
Vadim Kurland 4fa4ce5cac using command "terminal width 256" to turn off ANSI commands in
the PIX command echo.
2010-10-07 22:41:14 +00:00
Vadim Kurland 9a64de05d9 * FindObjectWidget.cpp (showObject): rolled back change done in
r3320 (refs #1790) "When an object is found using Find and the
object is in the object tree, the keyboard focus shifts to the
Object Panel". That change broke highlighting of the found object
in rules.
2010-10-07 22:02:38 +00:00
Vadim Kurland be1726532b refs #336 setting timeouts in the template object 2010-10-07 19:56:18 +00:00
Vadim Kurland b9b3749d4c refs #336 changelog and release notes update 2010-10-07 19:11:20 +00:00
Vadim Kurland 6156ac9cbe refs #336 Need template for PIX firewall; added tmplate for PIX 50X 2010-10-07 19:08:58 +00:00
Vadim Kurland a6fdcb02a4 changelog records 2010-10-07 03:29:28 +00:00
Vadim Kurland 76c73561ba flag WindowCloseButtonHint is only available in Qt 4.5 and later 2010-10-07 03:25:54 +00:00
Vadim Kurland 24c222a0a4 fixed #1710 unit tests to test generated file names, manifest and activation commands for compilers for PF and ipfw 2010-10-07 01:14:19 +00:00
Vadim Kurland 9475e71877 need to escape file name and path if it has spaces 2010-10-07 01:14:01 +00:00
Vadim Kurland 44a525b670 fixed #1788 Modify text in Replace icon drop area 2010-10-06 22:56:00 +00:00
Vadim Kurland 2b60dcac8e fixed #1783 "PIX routing entries require interface, but PIX
config will compile without interface in Routing rule". Policy
      compiler for PIX now checks that both "interface" and "gateway"
      rule elements are not empty.
2010-10-06 22:41:43 +00:00
Vadim Kurland 966fad1749 fixed #1792 address column header in InterfaceEditorWidget should say "IP Address" 2010-10-06 21:34:01 +00:00
Vadim Kurland 4e56d710f9 setting an icon for the dialog using standard method 2010-10-06 21:04:52 +00:00
Vadim Kurland 2ca6654855 correct return type in regCheck() 2010-10-06 01:24:24 +00:00
Vadim Kurland 48a8c9ff79 added eval warning dialog refs #1727 2010-10-06 01:04:35 +00:00
Vadim Kurland 1141ee6223 added log graphics; not used right now 2010-10-05 23:52:18 +00:00
Vadim Kurland 62dac9e362 fixed SF bug 3077132 "no PREROUTING rule with
*-Interface". Rules matching addresses of a wildcard interface
      (e.g. "ppp*") were not properly generated.
2010-10-05 23:05:19 +00:00
Vadim Kurland a72e592bf3 fixed unit tests for the fix for SF bug 3039681 2010-10-05 21:21:30 +00:00
Vadim Kurland 4b1ecbfc93 added test cases for SF bug 3077132 2010-10-05 19:40:29 +00:00
Vadim Kurland dd6a245bc3 fixed SF bug 3039681 "context-menu items inconsistent for
Single/Multiple rules". When several rules are selected in rule
      set, some context menu itmes should turn to plural.
2010-10-05 19:24:59 +00:00
Vadim Kurland 4f5a64b570 fixed #1778 "main menu Rules should have the same items that
context RuleSetView menu when no rules are selected"
2010-10-05 19:02:16 +00:00
Vadim Kurland a66b039af9 fixed #1777 "scroll new fw object to the top of the tree view
panel once its created". This has side effect in that some
      other operations that open an object in the tree will also
      scroll the tree to position this object at the top.
2010-10-05 02:32:12 +00:00
Vadim Kurland 05568ccbc0 fixed #1791 "Add preference flag to enable / disable the Custom
templates button on the New Firewall Wizard". Use of the
      custom template library to create new firewall object is now
      optional, controlled by a checkbox in the "Object" tab of the
      gobal preferenes dialog.  New users will have this option turned
      off by default, however existing users will see it enabled for
      backwards compatibility.
2010-10-05 02:15:37 +00:00
Vadim Kurland 10862bdfed fixed #1790 "When an object
is found using Find and the object is in the object tree, the
keyboard focus shifts to the Object Panel". The "find" pabel now
retains keyboard focus after it shows found object in the tree,
this allows the user to just hit Enter on the keyboard to find
the next object.
2010-10-05 01:23:39 +00:00
Vadim Kurland d079f0f445 fixed #1785 Deleting graphic icon of object from Find tab should also remove the text name or label 2010-10-05 01:11:35 +00:00
Vadim Kurland 9a097d18c9 fixed #1770 Eliminated pause
that happened when user switched from page 0 to page 1 of the new
firewall wizard. Pause was caused by the DNS queries the program
ran trying to determine ip address of the firewall using the name
provided on the first page of the wizard. Now DNS query is
launched only if user wants to create interfaces uses snmp scan.
2010-10-05 00:24:32 +00:00
Vadim Kurland 7ccb7a1e38 fixed crash that happened when user tried to use context menu item Duplicate 2010-10-04 23:46:33 +00:00
Vadim Kurland cee564ac89 fixed #1772
improved design of the widget used to edit ip addresses and other
attributes of an interface in the new firewall, new host and new
cluster wizards. Removed "MAC Address" imput field and rearranged
other input fields according to the result of usability tests.
2010-10-04 23:37:38 +00:00
Vadim Kurland 053ac47849 refs #1787 trying to make obj_name have keyboard focus when new firewall wizard opens, does not work so far 2010-10-04 22:52:23 +00:00
Vadim Kurland f9372b04a1 fixed bug introduced with library switcher reimplementation: it should be possible to duplicate an object into the same library 2010-10-04 22:29:06 +00:00
Vadim Kurland d845c3f0ea fixed #1784 added Cisco ASA (PIX) error
message "cannot add route entry" to the list of errors that
built-in installer recognizes and marks install process as
"Failure".
2010-10-04 22:22:58 +00:00
Vadim Kurland e899075231 fixed #1769 change interface type text in the interface editor widget; also fixed the code that turns off intro dialog in unit tests 2010-10-04 22:13:07 +00:00
Vadim Kurland 20a3ae73bf fixed #1768 Add title and subheaders to all pages of the new firewall wizard; subtitles on pages are difficult to formulate since some pages already have explanations that are sufficient 2010-10-04 21:57:21 +00:00
Vadim Kurland 15818d1837 fixed #1767 improved UI in the new firewall and new host dialogs
where user chooses file for the custom template library or uses
      standard template library.
2010-10-04 21:23:58 +00:00
Vadim Kurland f77e2d35b8 fixed #1766 change prompt text in the first page of the new firewall wizard 2010-10-04 20:48:26 +00:00
Vadim Kurland 8aa32e61d6 refs #1779, #1765, #1764, #1763 using a/b testing facility to show different quick start guides to different users; dialog that invites user to watch quick start guide turns itself off after 5 starts of the program 2010-10-04 19:51:46 +00:00
Vadim Kurland 2f57774292 disable "intro" dialog on the startup in unit tests 2010-10-04 18:26:41 +00:00
Vadim Kurland de60a2d16f updated release notes 2010-10-04 01:56:16 +00:00
Vadim Kurland e162a0c6b3 fixed #1776 once new firewall is created, automatically open its Policy 2010-10-04 01:52:22 +00:00
Vadim Kurland ad6cfe82ea * FWWindow.cpp (FWWindow::showIntroDialog): fixed #1765, #1779
Move quick start guide to the web site. The "Quick Start Guide" is
now part of the web site and the GUI only shows a
dialog-invitation to watch it.
2010-10-04 01:37:57 +00:00
Vadim Kurland 8f56bc6384 added front page to the introduction guide 2010-10-01 19:25:53 +00:00
Vadim Kurland 562b904da9 fixed #1763 Implemented
basic facility for A/B testing within the GUI
2010-10-01 19:09:02 +00:00
Vadim Kurland 46c10debda fixed #1755 "hitting enter after editing search attribute in the
Find panel should trigger search"
2010-10-01 02:21:20 +00:00
Vadim Kurland 9665b619d7 fixed #1760 Search by attribute "name" should search by name or label 2010-10-01 02:02:30 +00:00
Vadim Kurland 5ba94e3b3b fixed #1757 Allow searching by attributes even after an object
is dropped into the drop area in search panel.
2010-10-01 01:51:41 +00:00
Vadim Kurland 7a389e9c7d fixed #1759 "Use default template library" button seems to do
nothing. This button should only be enabled if user switched to
      their own library of template objects. The button should be
      disabled if they switched back to the standard template library
      or never switched to their own one.
2010-10-01 01:38:06 +00:00
Vadim Kurland 73752d58d9 fixed #1754 Disable "Find" context menu item for system folders 2010-10-01 01:20:25 +00:00
Vadim Kurland c347ca4735 fixed #1756 Change prompt in the drop areas of the search panel 2010-10-01 01:10:06 +00:00