Build results of 39d61b9 (on master)

Changes

@@ -1,3 +1,29 @@
+3.062     2015-01-27 11:45:34+01:00 Europe/Berlin
+
+ - Removed global attribute 'policy_distribution_point' at host.
+   Use attribute 'policy_distribution_point' at router or area instead.
+ - Attribute 'tunnel_all' is optional and unused now.
+   Will be invalid in next version.
+ - Config option 'area_ignore_crypto' is enabled by default now.
+   Will be removed in next version.
+ - No longer guess route for crypto software clients    
+   Virtual router of software clients must no longer be directly
+   connected with VPN router. Some other router must be placed in
+   between now. This router will be used as next hop when reaching
+   tunnelled software client network.
+ - Ignore blocked crypto interface when checking secondary optimization.
+ - Handle grouped NAT tags more restrictive.
+   Restrict use of hidden NAT tag together with grouped NAT tags:
+   - Don't allow other hidden NAT tags. Otherwise we can't be sure,
+     that shared hidden NAT tag will be activated.
+   - Don't allow the same group without shared hidden NAT tag.
+     Otherwise the shared hidden NAT tag won't be activated in a NAT domain,
+     where non hidden NAT tags are no longer active.
+   - But still allow grouped pairs of hidden NAT tags.
+ - Fixed nondeterminism in generated code 
+   - for devices of model Linux with multiple interfaces and
+   - for devices with crypto tunnels of different type
+
 3.061     2015-01-09 10:33:56+01:00 Europe/Berlin
 
  - Added different and now optional log modifiers:
@@ -15,6 +41,8 @@
  - Removed config options check_owner_extend and check_routing_manual.
  - Fixed handling of path ending at interface with pathrestriction.
  - Allow owner with 'show_all' even if there are multiple toplevel areas.
+ - Fixed NAT for encrypted traffic of VPN tunnel. 
+   Previously a wrong peer IP was used. 
 
 3.060     2014-12-10 15:17:42+01:00 Europe/Berlin
 

META.yml

@@ -33,4 +33,4 @@ requires:
   strict: '0'
   utf8: '0'
   warnings: '0'
-version: '3.061'
+version: '3.062'

Makefile.PL

@@ -50,7 +50,7 @@ my %WriteMakefileArgs = (
     "Test::More" => 0,
     "lib" => 0
   },
-  "VERSION" => "3.061",
+  "VERSION" => "3.062",
   "test" => {
     "TESTS" => "t/*.t"
   }

README

@@ -1,7 +1,7 @@
 
 
 This archive contains the distribution Netspoc,
-version 3.061:
+version 3.062:
 
   Generates rules for many firewalls from a central ruleset.
 

bin/cut-netspoc

@@ -60,7 +60,7 @@ use Pod::Usage;
 use Netspoc;
 use locale;
 
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing
@@ -170,7 +170,9 @@ sub get_zones {
 # Main program
 ####################################################################
 
-Netspoc::set_config({time_stamps => 1, max_errors => 9999, verbose => !$quiet});
+my $file_config = &read_config($path);
+Netspoc::set_config($file_config, 
+                    {time_stamps => 1, max_errors => 9999, verbose => !$quiet});
 &show_version();
 
 # Read and process netspoc configuration data.

bin/netspoc

@@ -127,6 +127,6 @@ use strict;
 use warnings;
 use Netspoc;
 
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 
 Netspoc::compile(\@ARGV);

bin/print-group

@@ -83,7 +83,7 @@ use Netspoc;
 use Getopt::Long;
 use Pod::Usage;
 
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing
@@ -110,14 +110,15 @@ pod2usage(1) if $help;
 pod2usage(-exitstatus => 0, -verbose => 2) if $man;
 $show_ip or $show_name or $show_ip = $show_name = 1;
 
-my $config = shift @ARGV or pod2usage(2);
+my $in_path = shift @ARGV or pod2usage(2);
 my $name = shift @ARGV or pod2usage(2);
 
 ####################################################################
 # Main program
 ####################################################################
 
-&set_config({ verbose => !$quiet });
+my $file_config = &read_config($in_path);
+&set_config($file_config, { verbose => !$quiet });
 
 # Parse group definition(s).
 $Netspoc::input = $name;
@@ -133,7 +134,7 @@ while (1) {
 }
 
 # Read and process Netspoc configuration file or directory.
-&read_file_or_dir($config);
+&read_file_or_dir($in_path);
 &link_topology();
 &mark_disabled();
 &set_zone();

bin/print-service

@@ -67,7 +67,7 @@ use Netspoc;
 use Getopt::Long;
 use Pod::Usage;
 
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing
@@ -85,7 +85,7 @@ GetOptions ( 'nat=s'  => \$nat_net,
 pod2usage(1) if $help;
 pod2usage(-exitstatus => 0, -verbose => 2) if $man;
 
-my $config = shift @ARGV or pod2usage(2);
+my $in_path = shift @ARGV or pod2usage(2);
 my $name = shift @ARGV;
 
 ####################################################################
@@ -143,10 +143,11 @@ sub prt_info {
 # Main program
 ####################################################################
 
-&set_config({ verbose => !$quiet });
+my $file_config = &read_config($in_path);
+&set_config($file_config, { verbose => !$quiet });
 
 # Read and process Netspoc configuration file or directory.
-&read_file_or_dir($config);
+&read_file_or_dir($in_path);
 
 $name =~ s/^service://;
 if ($name) {

bin/rename-netspoc

@@ -85,7 +85,7 @@ use open qw(:std :utf8);
 use utf8;
 use Encode;
 
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 my $filename_encode = 'UTF-8';
 
 my $ignore_files = '^(raw|config|CVS|RCS|\.#.*|.*~)$';

bin/watchers-to-json

@@ -14,7 +14,7 @@ use utf8;
 use Encode;
 use File::Path qw(make_path);
 use JSON;
-our $VERSION = '3.061'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.062'; # VERSION: inserted by DZP::OurPkgVersion
 my $filename_encode = 'UTF-8';
 
 my $ignore_files = '^(raw|config|JSON|CVS|RCS|\.#.*|.*~)$';