Vadim Kurland f366e2dc66 * PolicyCompiler_PrintRule.cpp (_printOptionalGlobalRules): SF bug ...

3178186 "Add ND/NS allow rules for the FORWARD chain". Rules that are
added automatically to ipv6 Linux firewall to permit neighbor discovery
packets should be also added to the FORWARD chain if the firewall is
a bridge.

see #2323

2011-04-10 17:58:32 -07:00

..

combined

added test/example for the case of inheritance of a common polict by firewalls that run different platforms

2009-01-04 20:15:45 +00:00

iosacl

see #2252 compilers for iosacl and pix automatically increment/decrement port range boundaries to make tcp/udp port ranges defined in tcp/udp service objects inclusive

2011-03-21 12:56:37 -07:00

ipf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipfw

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

ipt

* PolicyCompiler_PrintRule.cpp (_printOptionalGlobalRules): SF bug

2011-04-10 17:58:32 -07:00

pf

* Compiler.cpp (expandGroupsInRuleElement): sorting objects in the

2011-03-12 19:50:24 -08:00

pix

* PolicyCompiler_cisco.cpp (processNext): see #2308 "ASA rules

2011-04-08 18:08:56 -07:00

procurve_acl

see #2207 finished fixes in all compilerts to enforce changes per #2209; regression tests for all platforms pass

2011-03-11 12:22:11 -08:00