From 7c7fc6a269bccbf231637e66e03f104faf775310 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Sun, 30 Nov 2008 03:49:33 +0000
Subject: [PATCH] return works fine with any firewall rule.  it doesn't return
 anything for protos other than TCP, UDP, or TCP/UDP, but is valid in all
 rules. never exclude it.

---
 etc/inc/filter.inc | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 7afa6bb8fd..c3b711f3a5 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1479,15 +1479,7 @@ function generate_user_filter_rule($rule, $ngcounter) {
 
 			if ($type == "reject") {
 				/* special reject packet */
-				if ($rule['protocol'] == "tcp") {
-					$aline['type'] = "block return-rst";
-				} else if ($rule['protocol'] == "udp") {
-					$aline['type'] = "block return-icmp";
-				} else if ($rule['protocol'] == "tcp/udp") {
-                                        $aline['type'] = "block return";
-				} else {
-					$aline['type'] = "block";
-				}
+                                $aline['type'] = "block return";
 			} else {
 				$aline['type'] = $type;
 			}