mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-21 10:47:16 +01:00
0aa3eac4d4
rule element by name after group is expanded, this helps ensure stable ordering of objects in generated configuration. * Compiler.cpp (replaceClusterInterfaceInItfRE::processNext): sorting objects in rule element after cluster interfaces have been replaced, this helps ensure stable ordering of objects in generated configuration. * FWObject.h (FWObjectNameCmpPredicate): moved this class from gui-specific module to libfwbuilder as it is universally useful. It can compare FWObject objects by name and can optionally can follow references; it can be used with std::sort() to sort lists of FWObject pointers or directly sort rule elements.
107 lines
5.1 KiB
Plaintext
107 lines
5.1 KiB
Plaintext
|
|
|
|
|
|
|
|
# Tables: (1)
|
|
table <tbl.r1.s> { 192.168.1.1 , 222.222.222.222 }
|
|
|
|
# Policy compiler errors and warnings:
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '2 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '2 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '3 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '3 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '6 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '9 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '9 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '10 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '10 (global)' below it
|
|
# firewall62:Policy:1: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:2: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:4: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:8: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:9: warning: Changing rule direction due to self reference
|
|
# firewall62:Policy:12: warning: Changing rule direction due to self reference
|
|
#
|
|
# Rule 0 (en0)
|
|
# rule from FR 1948872
|
|
# should generate
|
|
# pass in quick on en0 user proxy
|
|
pass in quick on en0 inet from any to any user proxy label "RULE 0 -- ACCEPT "
|
|
#
|
|
# Rule 1 (global)
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '2 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '3 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '5 (global)' below it
|
|
# firewall62:Policy:1: error: Rule '1 (global)' shadows rule '6 (global)' below it
|
|
# firewall62:Policy:1: warning: Changing rule direction due to self reference
|
|
|
|
pass out quick inet from <tbl.r1.s> to any user { 2000, 500 } label "RULE 1 -- ACCEPT "
|
|
#
|
|
# Rule 2 (global)
|
|
# firewall62:Policy:2: warning: Changing rule direction due to self reference
|
|
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 2 -- ACCEPT "
|
|
#
|
|
# Rule 3 (global)
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '4 (global)' below it
|
|
# firewall62:Policy:3: error: Rule '3 (global)' shadows rule '5 (global)' below it
|
|
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 3 -- ACCEPT "
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 3 -- ACCEPT "
|
|
#
|
|
# Rule 4 (global)
|
|
# firewall62:Policy:4: warning: Changing rule direction due to self reference
|
|
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 4 -- ACCEPT "
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 4 -- ACCEPT "
|
|
#
|
|
# Rule 5 (global)
|
|
pass out quick inet proto tcp from <tbl.r1.s> to any port 80 flags any label "RULE 5 -- ACCEPT "
|
|
pass out quick inet from <tbl.r1.s> to any user 2000 label "RULE 5 -- ACCEPT "
|
|
#
|
|
# Rule 6 (global)
|
|
pass quick inet from 192.168.1.1 to any user 2000 label "RULE 6 -- ACCEPT "
|
|
#
|
|
# Rule 7 (global)
|
|
pass quick inet from 192.168.1.0/24 to any user 2000 label "RULE 7 -- ACCEPT "
|
|
#
|
|
# Rule 8 (global)
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '10 (global)' below it
|
|
# firewall62:Policy:8: error: Rule '8 (global)' shadows rule '9 (global)' below it
|
|
# firewall62:Policy:8: warning: Changing rule direction due to self reference
|
|
|
|
pass in quick inet from any to <tbl.r1.s> user 2000 label "RULE 8 -- ACCEPT "
|
|
#
|
|
# Rule 9 (global)
|
|
# firewall62:Policy:9: warning: Changing rule direction due to self reference
|
|
|
|
pass in quick inet from any to <tbl.r1.s> user { 2000, 500 } label "RULE 9 -- ACCEPT "
|
|
#
|
|
# Rule 10 (global)
|
|
pass in quick inet from any to <tbl.r1.s> user 2000 label "RULE 10 -- ACCEPT "
|
|
#
|
|
# Rule 11 (global)
|
|
pass quick inet from ! 192.168.1.0/24 to any user 2000 label "RULE 11 -- ACCEPT "
|
|
#
|
|
# Rule 12 (global)
|
|
# firewall62:Policy:12: warning: Changing rule direction due to self reference
|
|
|
|
pass in quick inet from any to ! <tbl.r1.s> user 2000 label "RULE 12 -- ACCEPT "
|
|
#
|
|
# Rule 13 (global)
|
|
block quick inet from any to any no state label "RULE 13 -- DROP "
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any no state label "RULE 10000 -- DROP "
|
|
|