Build results of 18c6535 (on master)

hknutzen · Jan 6, 2014 · dfc5991 · dfc5991
1 parent b7ed49b
commit dfc5991
Show file tree

Hide file tree

Showing 48 changed files with 1,509 additions and 1,316 deletions.
diff --git a/Changes b/Changes
@@ -1,3 +1,21 @@
+3.042     2014-01-06 10:51:30 Europe/Berlin
+
+ - Improved runtime to find and delete redundant reverse rules.
+ - No ACL is added to crosslink interfaces of IOS routers which don't filter.
+   Previously, an ACL with a single "permit ip any any" was generated.
+ - Managed loopback interfaces are excluded from automatic group of networks.
+ - Added support for 'managed = local_secondary'.
+   This works similar to 'managed = secondary', but only inside a
+   cluster of zones, connected by routers with 'managed=local' or
+   'managed=local_secondary'. If a rule is already filtered by a
+   router with 'managed=local', then a router with
+   'managed=local_secondary' only checks for source network and
+   destination network.
+ - Added support for crosslinked routers with different filter strenght.
+   If devices with different filter strenght are linked together by a
+   crosslink network, then omit filter only at crosslink interface of
+   weakest device.
+
 3.041     2013-11-28 08:52:14 Europe/Berlin
 
  - Added support for virtual interface with HSRPv2.

diff --git a/LICENSE b/LICENSE
@@ -1,4 +1,4 @@
-This software is Copyright (c) 2013 by Heinz Knutzen.
+This software is Copyright (c) 2014 by Heinz Knutzen.
 
 This is free software, licensed under:
 

diff --git a/MANIFEST b/MANIFEST
@@ -13,7 +13,6 @@ bin/cut-netspoc
 bin/netspoc
 bin/print-group
 bin/print-service
-bin/print-service~
 bin/rename-netspoc
 bin/watchers-to-json
 cvs-support/Makefile
@@ -60,9 +59,9 @@ misc/perltidyrc
 t/Test_Netspoc.pm
 t/aggregate.t
 t/any-multicast-interface.t
-t/any-multicast-interface.t~
 t/auto_intf.t
 t/bridged.t
+t/crosslink.t
 t/crypto.t
 t/global-permit.t
 t/host-range.t
@@ -71,16 +70,17 @@ t/local-filter.t
 t/local-opt.t
 t/managed-host.t
 t/nat.t
-t/need-protect.t~
 t/optimize-subnet.t
 t/overlaps.t
 t/owner.t
 t/parser.t
 t/pathrestrict-border.t
 t/protect-interfaces.t
-t/protect-interfaces.t~
 t/rename.t
+t/route.t
 t/secondary.t
+t/stateless.t
+t/stateless.t~
 t/unenforceable.t
 t/unnumbered.t
 t/virtual-loopback-nat.t

diff --git a/META.yml b/META.yml
@@ -31,4 +31,4 @@ requires:
   strict: 0
   utf8: 0
   warnings: 0
-version: 3.041
+version: 3.042
diff --git a/Makefile.PL b/Makefile.PL
@@ -22,7 +22,6 @@ my %WriteMakefileArgs = (
   },
   "DISTNAME" => "Netspoc",
   "EXE_FILES" => [
-    "bin/print-service~",
     "bin/print-service",
     "bin/watchers-to-json",
     "bin/print-group",
@@ -48,7 +47,7 @@ my %WriteMakefileArgs = (
     "utf8" => 0,
     "warnings" => 0
   },
-  "VERSION" => "3.041",
+  "VERSION" => "3.042",
   "test" => {
     "TESTS" => "t/*.t"
   }

diff --git a/README b/README
@@ -1,11 +1,11 @@
 
 
 This archive contains the distribution Netspoc,
-version 3.041:
+version 3.042:
 
   Generates rules for many firewalls from a central ruleset.
 
-This software is Copyright (c) 2013 by Heinz Knutzen.
+This software is Copyright (c) 2014 by Heinz Knutzen.
 
 This is free software, licensed under:
 

diff --git a/bin/cut-netspoc b/bin/cut-netspoc
@@ -27,7 +27,7 @@ use Netspoc;
 #use open ':locale';
 use locale;
 
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing

diff --git a/bin/netspoc b/bin/netspoc
@@ -136,7 +136,7 @@ use Netspoc;
 use Getopt::Long;
 use Pod::Usage;
 
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing
@@ -217,7 +217,6 @@ Netspoc::find_subnets_in_zone();
 &mark_secondary_rules();
 &abort_on_error();
 &set_abort_immediately();
-&optimize();
 &rules_distribution();
 &local_optimization();
 &print_code($out_dir);

diff --git a/bin/print-group b/bin/print-group
@@ -83,7 +83,7 @@ use Netspoc;
 use Getopt::Long;
 use Pod::Usage;
 
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing

diff --git a/bin/print-service b/bin/print-service
@@ -67,7 +67,7 @@ use Netspoc;
 use Getopt::Long;
 use Pod::Usage;
 
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing

diff --git a/bin/print-service~ b/bin/print-service~
diff --git a/bin/rename-netspoc b/bin/rename-netspoc
@@ -85,7 +85,7 @@ use open qw(:std :utf8);
 use utf8;
 use Encode;
 
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 my $filename_encode = 'UTF-8';
 
 my $ignore_files = '^(raw|config|CVS|RCS|\.#.*|.*~)$';

diff --git a/bin/watchers-to-json b/bin/watchers-to-json
@@ -14,7 +14,7 @@ use utf8;
 use Encode;
 use File::Path qw(make_path);
 use JSON;
-our $VERSION = '3.041'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '3.042'; # VERSION: inserted by DZP::OurPkgVersion
 my $filename_encode = 'UTF-8';
 
 my $ignore_files = '^(raw|config|JSON|CVS|RCS|\.#.*|.*~)$';