Skip Menu |

This queue is for tickets about the PIX-Walker CPAN distribution.

Report information
The Basics
Id: 85932
Status: new
Priority: 0/
Queue: PIX-Walker

People
Owner: Nobody in particular
Requestors: dave.rowswell [...] gmail.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Additional port definition required in PIXWalker
Date: Thu, 6 Jun 2013 14:09:06 -0400
To: bug-PIX-Walker [...] rt.cpan.org
From: Dave Rowswell <dave.rowswell [...] gmail.com>
Hello, I've found a missing PIX port literal that I think should be added to the list in the module Walker.pm. =================== Module: PIX::Walker Module Version: 1.10 Perl Version: ============ This is perl 5, version 14, subversion 2 (v5.14.2) built for MSWin32-x86-multi-thread Copyright 1987-2011, Larry Wall ============ Operating System: Windows 7 Professional ================================================ EXAMPLE PROGRAM THAT GENERATES THE ERROR ================================================ use PIX::Walker; my $config = "PIXWALKERTEST1"; my $fw = new PIX::Walker($config); foreach my $acllist ($fw->acls()) { print "$acllist\n"; my $acl = $fw->acl($acllist) || die("ACL does not exist"); #my $acl = $fw->acl("outside_access") || die("ACL does not exist"); my $matched = 0; # search each line of the ACL for possible matches foreach my $line ($acl->lines) { if ($line->match( #source => "10.0.1.100", #dest => "192.168.1.3", #dport => "80", # dest port dport => "cifs", # dest port proto => "tcp")) { if (!$matched++) { print "Matched ACL " . $acl->name . " (" . $acl->elements . " ACE)\n"; } print $line->print, "\n"; } } <>; } ======================================= EXAMPLE THAT GENERATES THE ERROR ======================================= !============================================= ! GNS3 HEADER SECTION - START !============================================= : Saved : Written by enable_15 at 20:38:16.095 UTC Thu Mar 4 2010 ! !PIX Version 7.2(3) ! hostname pixfirewall enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ethernet0 nameif mapping security-level 100 ip address 10.0.0.17 255.255.255.240 no shut ftp mode passive !============================================= ! GNS3 HEADER SECTION - END !============================================= !=============================================== ! OBJECT GROUPS AND ACCESS LIST SECTION - START !=============================================== object-group service gensys-cti-tserver-tcp tcp description gensys cti tserver port-object range 3100 3150 port-object range 3010 3011 port-object eq cifs port-object eq 3023 !============================================= ! OBJECT GROUPS AND ACCESS LIST SECTION - END !============================================= ! GNS3 TRAILER SECTION - START !============================================= access-list mapping-acl extended permit icmp any any access-list mapping-acl extended permit ip any any pager lines 24 term width 180 logging enable logging buffer-size 32768 logging buffered debugging mtu mapping 1500 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 access-group mapping-acl in interface mapping route mapping 10.0.0.0 255.255.255.240 10.0.0.18 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0 terminal width 199 pager 0 ! ! prompt hostname context !============================================= ! GNS3 TRAILER SECTION - END !============================================= =================== ERROR MESSAGE =================== Unknown port name 'cifs' at C:/Users/rowswed/Perl/Dwimperl/perl/site/lib/PIX/Walker.pm line 489. Press any key to continue . . . ============================== SUGGESTED PATCH IN WALKER.PM ============================== # cisco PIX defined # (there may be more now; I have not updated this in awhile) 'aol' => '5190', 'bgp' => '179', 'biff' => '512', 'bootpc' => '68', 'bootps' => '67', 'chargen' => '19', 'cifs' => '445', <============================================= 'cmd' => '514', 'rsh' => '514', 'daytime' => '13', 'discard' => '9', 'domain' => '53', 'dnsix' => '195', ================================== Thanks! David