Vadim Kurland d64b12221a * PolicyCompiler_PrintRule.cpp (_printTarget): see #2235 "Modified ...

rule action for Continue". Rules with action "Continue" should
translate into iptables commands without "-j TARGET" parameter. If
such rule also has logging enabled, it should use target "-j LOG"
instead of generating additional chain.

2011-04-11 19:35:42 -07:00

..

combined

added test/example for the case of inheritance of a common polict by firewalls that run different platforms

2009-01-04 20:15:45 +00:00

iosacl

see #2252 compilers for iosacl and pix automatically increment/decrement port range boundaries to make tcp/udp port ranges defined in tcp/udp service objects inclusive

2011-03-21 12:56:37 -07:00

ipf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipfw

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipt

* PolicyCompiler_PrintRule.cpp (_printTarget): see #2235 "Modified

2011-04-11 19:35:42 -07:00

pf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

pix

* PolicyCompiler_cisco.cpp (processNext): see #2308 "ASA rules

2011-04-08 18:08:56 -07:00

procurve_acl

see #2207 finished fixes in all compilerts to enforce changes per #2209; regression tests for all platforms pass

2011-03-11 12:22:11 -08:00