mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only add 6rd rules if there is an IPv4 IP defined for the gateway,

Browse Source 
otherwise ruleset ends up invalid. Ticket #4935
This commit is contained in:
Chris Buechler 2015-09-14 19:04:59 -05:00
parent 351b8519d6
commit 0273d369eb
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/etc/inc/filter.inc
View File

@ -3414,12 +3414,15 @@ EOD;
$tracker = $saved_tracker;
switch ($oc['type6']) {
case "6rd":
if (is_ipaddrv4($config['interfaces'][$on]['gateway-6rd'])) {
$ipfrules .= <<<EOD
# allow our proto 41 traffic from the 6RD border relay in
pass in {$log['pass']} on \${$oc['descr']} proto 41 from {$config['interfaces'][$on]['gateway-6rd']} to any tracker {$increment_tracker($tracker)} label "{$fix_rule_label("Allow 6in4 traffic in for 6rd on {$oc['descr']}")}"
pass out {$log['pass']} on \${$oc['descr']} proto 41 from any to {$config['interfaces'][$on]['gateway-6rd']} tracker {$increment_tracker($tracker)} label "{$fix_rule_label("Allow 6in4 traffic out for 6rd on {$oc['descr']}")}"
EOD;
}
/* XXX: Really need to allow 6rd traffic coming in for v6 this is against default behaviour! */
if (0 && is_ipaddrv6($oc['ipv6'])) {
$ipfrules .= <<<EOD