the state type is required/valid for all specifications of protocol, not

just the ones formerly listed. For instance, sloppy is valid (and widely
used on 2.0.x and some older 2.1x) with "any" protocol.
This commit is contained in:
Chris Buechler 2013-08-01 21:42:46 -05:00
parent 887d1b082d
commit 653bde345e

View File

@ -2334,7 +2334,7 @@ function filter_generate_user_rule($rule) {
$aline['flags'] = "flags S/SA ";
}
}
if (in_array($rule['protocol'], array("icmp","udp","tcp","tcp/udp")) && ($type == "pass")) {
if ($type == "pass") {
/*
* # keep state
* works with TCP, UDP, and ICMP.