Vadim Kurland 126b561e32 * PolicyCompiler_cisco.cpp (processNext): see #2308 "ASA rules ...

with service set to "http" and destination set to asa firewall
object should generate different command syntax". Policy rules
that have firewall object in Destination and http object in
Service now generate "http" commands. This is similar to how
fwbuilder generates "ssh", "telnet" and "icmp" commands to permit
corresponding services to the firewall itself.

2011-04-08 18:08:56 -07:00

..

combined

added test/example for the case of inheritance of a common polict by firewalls that run different platforms

2009-01-04 20:15:45 +00:00

iosacl

see #2252 compilers for iosacl and pix automatically increment/decrement port range boundaries to make tcp/udp port ranges defined in tcp/udp service objects inclusive

2011-03-21 12:56:37 -07:00

ipf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipfw

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipt

updated unit test file

2011-03-13 00:06:35 -08:00

pf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

pix

* PolicyCompiler_cisco.cpp (processNext): see #2308 "ASA rules

2011-04-08 18:08:56 -07:00

procurve_acl

see #2207 finished fixes in all compilerts to enforce changes per #2209; regression tests for all platforms pass

2011-03-11 12:22:11 -08:00