mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Since we are now allowing on IN only we need to allow the firewall itself to talk to its interfaces.

Browse Source
This commit is contained in:
Scott Ullrich 2005-02-20 05:43:10 +00:00
parent 77a82d1a6c
commit 3fa49e43a3
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
etc/inc/filter.inc
View File

@ -943,7 +943,7 @@ function filter_rules_generate() {
$ipfrules .= "pass out quick on " . $wanif . " inet proto tcp from any to any port www keep state label \"transparent proxy\"\n";
}
$ipfrules .= <<<EOD
$ipfrules .= <<<EOA
# loopback
anchor "loopback"
@ -952,7 +952,20 @@ pass out quick on lo0 all label "pass loopback"
# pass traffic from firewall -> out
anchor "firewallout"
pass out quick on $wanif inet proto tcp from $wanif to any keep state
EOA;
$i = 0;
$ifdescrs = array('wan', 'lan');
for ($j = 1; isset($config['interfaces']['opt' . $j]); $j++) {
$ifdescrs['opt' . $j] = "opt" . $j;
}
foreach ($ifdescrs as $ifdescr => $ifname) {
$int = filter_translate_type_to_real_interface($ifname);
echo "pass out quick on {$ifname} inet proto tcp from {$ifname} to any keep state";
return $int;
}
$ipfrules .= <<<EOD;
# enable ftp-proxy
anchor "ftpproxy"