return works fine with any firewall rule. it doesn't return anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all rules. never exclude it.

This commit is contained in:
Chris Buechler 2008-11-30 03:49:33 +00:00
parent e5a4a0a5ef
commit 7c7fc6a269

View File

@ -1479,15 +1479,7 @@ function generate_user_filter_rule($rule, $ngcounter) {
if ($type == "reject") {
/* special reject packet */
if ($rule['protocol'] == "tcp") {
$aline['type'] = "block return-rst";
} else if ($rule['protocol'] == "udp") {
$aline['type'] = "block return-icmp";
} else if ($rule['protocol'] == "tcp/udp") {
$aline['type'] = "block return";
} else {
$aline['type'] = "block";
}
$aline['type'] = "block return";
} else {
$aline['type'] = $type;
}