Vadim Kurland 76dd6e285c * PolicyCompiler_ipt.cpp (decideOnChainIfDstFW::processNext): ...

fixes #1231 rules are placed FORWARD chain if firewall object is
"bridging firewall". This bugfix concerns specific rule
configuration used with bridging firewall where firewall object or
one of its interfaces is used in "destination" and an interface
which is not a bridge port is in the "interface" rule column. Rule
like this should go into INPUT chain but compiler used to splut it
and put generated iptables rules in both INPUT and FORWARD chains.
Rule should be placed in the FORWARD chain only if interface in
"interface" column is bridge port. The same algorithm also applies
to rules with firewall or one if its interfaces in the "Source"
column.

2010-02-14 18:54:47 +00:00

..

combined

added test/example for the case of inheritance of a common polict by firewalls that run different platforms

2009-01-04 20:15:45 +00:00

iosacl

fixes #1134 object-group can only be used with ipv4 extended acls

2010-01-22 20:39:24 +00:00

ipf

* ../src/iptlib/NATCompiler_ipt.cpp (VerifyRules2::processNext):

2010-01-20 02:55:38 +00:00

ipfw

* ../src/iptlib/NATCompiler_ipt.cpp (VerifyRules2::processNext):

2010-01-20 02:55:38 +00:00

ipt

* PolicyCompiler_ipt.cpp (decideOnChainIfDstFW::processNext):

2010-02-14 18:54:47 +00:00

pf

* OSConfigurator_bsd.cpp (OSConfigurator_bsd::configureInterfaces):

2010-02-14 06:16:44 +00:00

pix

fixes #1187 regression in compiler for PIX

2010-02-01 06:39:24 +00:00