diff --git a/usr/local/www/firewall_rules_edit.php b/usr/local/www/firewall_rules_edit.php
index 2a7e12d500..d7e1c3902e 100755
--- a/usr/local/www/firewall_rules_edit.php
+++ b/usr/local/www/firewall_rules_edit.php
@@ -339,6 +339,8 @@ if ($_POST) {
 	if($_POST['l7container'] && $_POST['l7container'] != "none") {
 		if(!($_POST['proto'] == "tcp" || $_POST['proto'] == "udp" || $_POST['proto'] == "tcp/udp"))
 			$input_errors[] = "You can only select a layer7 container for tcp and/or udp protocols";
+		if ($_POST['type'] <> "pass")
+			$input_errors[] = "You can only select a layer7 container for Pass type rules.";
 	}
 
 	if (!$input_errors) {