From 4fd77a143a3e48e1eedc7f47eea77751eef7d24a Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Tue, 28 Jun 2005 17:30:07 +0000 Subject: [PATCH] Only workaround RFC959 on optional interfaces if a gateway is set --- etc/inc/filter.inc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 994cb2d7d8..73b4b7fba3 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1521,7 +1521,8 @@ EOD; $optcfg = array(); generate_optcfg_array($optcfg); foreach($optcfg as $oc) { - $ipfrules .= "pass in quick on {$oc['if']} inet proto tcp from any to ({$oc['if']}) port > 49000 user proxy flags S/SA keep state label \"FTP PROXY: RFC959 violation workaround\" \n"; + if($oc['gateway'] <> "") + $ipfrules .= "pass in quick on {$oc['if']} inet proto tcp from any to ({$oc['if']}) port > 49000 user proxy flags S/SA keep state label \"FTP PROXY: RFC959 violation workaround\" \n"; } } }