From 653bde345e8f960de5bc745fe74e64d8ef3fd2d3 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Thu, 1 Aug 2013 21:42:46 -0500
Subject: [PATCH] the state type is required/valid for all specifications of
 protocol, not just the ones formerly listed. For instance, sloppy is valid
 (and widely used on 2.0.x and some older 2.1x) with "any" protocol.

---
 etc/inc/filter.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index bcd8931a01..154e3129a1 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2334,7 +2334,7 @@ function filter_generate_user_rule($rule) {
 			$aline['flags'] = "flags S/SA ";
 		}
 	}
-	if (in_array($rule['protocol'], array("icmp","udp","tcp","tcp/udp")) && ($type == "pass")) {
+	if ($type == "pass") {
 		/*
 		 *	# keep state
 		 *		works with TCP, UDP, and ICMP.