Vadim Kurland b4d1dd35fa 2009-05-16 vadim <vadim@vk.crocodile.org> ...

* PolicyCompiler_ipt.cpp (checkInterfaceAgainstAddressFamily::processNext):
fixed bug #2792888: "interface with only v4 address is used in v6
rules". Compiler should drop rule if it is associate with an
interface that does not have address that belongs to the address
family declared for the rule set. If interface has only ipv4
address, it will never see ipv6 packets and therefore rules that
have this interface in the "interface" rule element should not be
included in the output generated for the ipv6 or combined
ipv4+ipv6 rule sets.

2009-05-17 05:54:30 +00:00

..

combined

added test/example for the case of inheritance of a common polict by firewalls that run different platforms

2009-01-04 20:15:45 +00:00

iosacl

2009-03-19 vadim <vadim@vk.crocodile.org>

2009-03-19 14:42:35 +00:00

ipf

* dns.cpp (list): (change in libfwbuilder) getHostByName() used to

2008-10-21 03:21:32 +00:00

ipfw

* objects_init.xml.in: Added CustomService object "ESTABLISHED

2009-01-25 06:35:06 +00:00

ipt

2009-05-16 vadim <vadim@vk.crocodile.org>

2009-05-17 05:54:30 +00:00

pf

2009-05-14 vadim <vadim@vk.crocodile.org>

2009-05-14 21:54:42 +00:00

pix

2009-01-05 vadim <vadim@vk.crocodile.org>

2009-01-06 03:56:35 +00:00