fwbuilder

mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-21 02:37:16 +01:00

History

Vadim Kurland 3ac34b8c2d 2009-03-12 vadim <vadim@vk.crocodile.org>

* PolicyCompiler_iosacl.cpp (PolicyCompiler_iosacl::prolog): fixed
few bugs (no #) in policy compiler for Cisco IPv6 ACLs:

  - The "extended" keyword is not supported by IOS for IPv6 ACLs

  - keyword "established" is only valid in combination with
protocol tcp. If standard CustomService objects "ESTABLISHED" and
"ESTABLISHED ipv6" are used in a rule, enforce protocol to "tcp".

  - command to clear ipv6 access lists should be "no ipv6
access-list ipv6_management_in"

  - command to assign ipv6 acl to interface should be "ipv6
traffic-filter ipv6_acl in"

2009-03-13 05:04:54 +00:00

addr-table-1.tbl

merging cisco and pix modules

2008-03-19 03:43:11 +00:00

block-hosts.tbl

merging cisco and pix modules

2008-03-19 03:43:11 +00:00

do-diff

compilers for iosacl and pix use getAddressPtr

2008-05-20 00:02:10 +00:00

objects-for-regression-tests.fwb

2009-03-12 vadim <vadim@vk.crocodile.org>