Subject: | Additional port definition required in PIXWalker |
Date: | Thu, 6 Jun 2013 14:09:06 -0400 |
To: | bug-PIX-Walker [...] rt.cpan.org |
From: | Dave Rowswell <dave.rowswell [...] gmail.com> |
Hello,
I've found a missing PIX port literal that I think should be added to the
list in the module Walker.pm.
===================
Module: PIX::Walker
Module Version: 1.10
Perl Version:
============
This is perl 5, version 14, subversion 2 (v5.14.2) built for
MSWin32-x86-multi-thread
Copyright 1987-2011, Larry Wall
============
Operating System: Windows 7 Professional
================================================
EXAMPLE PROGRAM THAT GENERATES THE ERROR
================================================
use PIX::Walker;
my $config = "PIXWALKERTEST1";
my $fw = new PIX::Walker($config);
foreach my $acllist ($fw->acls()) {
print "$acllist\n";
my $acl = $fw->acl($acllist) || die("ACL does not exist");
#my $acl = $fw->acl("outside_access") || die("ACL does not exist");
my $matched = 0;
# search each line of the ACL for possible matches
foreach my $line ($acl->lines) {
if ($line->match(
#source => "10.0.1.100",
#dest => "192.168.1.3",
#dport => "80", # dest port
dport => "cifs", # dest port
proto => "tcp")) {
if (!$matched++) {
print "Matched ACL " . $acl->name .
" (" . $acl->elements . " ACE)\n";
}
print $line->print, "\n";
}
}
<>;
}
=======================================
EXAMPLE THAT GENERATES THE ERROR
=======================================
!=============================================
! GNS3 HEADER SECTION - START
!=============================================
: Saved
: Written by enable_15 at 20:38:16.095 UTC Thu Mar 4 2010
!
!PIX Version 7.2(3)
!
hostname pixfirewall
enable password 8Ry2YjIyt7RRXU24 encrypted
names
!
interface Ethernet0
nameif mapping
security-level 100
ip address 10.0.0.17 255.255.255.240
no shut
ftp mode passive
!=============================================
! GNS3 HEADER SECTION - END
!=============================================
!===============================================
! OBJECT GROUPS AND ACCESS LIST SECTION - START
!===============================================
object-group service gensys-cti-tserver-tcp tcp
description gensys cti tserver
port-object range 3100 3150
port-object range 3010 3011
port-object eq cifs
port-object eq 3023
!=============================================
! OBJECT GROUPS AND ACCESS LIST SECTION - END
!=============================================
! GNS3 TRAILER SECTION - START
!=============================================
access-list mapping-acl extended permit icmp any any
access-list mapping-acl extended permit ip any any
pager lines 24
term width 180
logging enable
logging buffer-size 32768
logging buffered debugging
mtu mapping 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
access-group mapping-acl in interface mapping
route mapping 10.0.0.0 255.255.255.240 10.0.0.18 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat
0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect
0:02:00
timeout uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
terminal width 199
pager 0
!
!
prompt hostname context
!=============================================
! GNS3 TRAILER SECTION - END
!=============================================
===================
ERROR MESSAGE
===================
Unknown port name 'cifs' at
C:/Users/rowswed/Perl/Dwimperl/perl/site/lib/PIX/Walker.pm line 489.
Press any key to continue . . .
==============================
SUGGESTED PATCH IN WALKER.PM
==============================
# cisco PIX defined
# (there may be more now; I have not updated this in awhile)
'aol' => '5190',
'bgp' => '179',
'biff' => '512',
'bootpc' => '68',
'bootps' => '67',
'chargen' => '19',
'cifs' => '445', <=============================================
'cmd' => '514',
'rsh' => '514',
'daytime' => '13',
'discard' => '9',
'domain' => '53',
'dnsix' => '195',
==================================
Thanks!
David