mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Do not install reflection rules for port forwards when the destination is invalid.

Browse Source
This commit is contained in:
Erik Fonnesbeck 2010-05-08 18:17:09 -06:00
parent ed69be7ad9
commit aba2f06d3a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/inc/filter.inc
View File

@ -869,6 +869,8 @@ function filter_generate_reflection($rule, $nordr, $rdr_ifs, $srcaddr, $dstaddr_
else
$rflctintrange = "";
$dstaddr = $dstaddr[0];
if(empty($dstaddr) || strtolower(trim($dstaddr)) == "port")
return "";
if(isset($rule['destination']['any'])) {
if(!$rule['interface'])