From c74804cd45599f85d1c70d499a2e3fecea3e2fff Mon Sep 17 00:00:00 2001 From: Ermal Date: Tue, 13 Apr 2010 23:19:59 +0000 Subject: [PATCH] Add code to allow applications on pfSense itself that bind to a socket or want to source route traffic to work. This fixes DynDns on multi-wan as the simplest of it. --- etc/inc/filter.inc | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 48f8ba0573..a143a31c5a 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1878,6 +1878,14 @@ EOD; pass out all keep state allow-opts label "let out anything from firewall host itself" EOD; + foreach ($FilterIflist as $ifdescr => $ifcfg) { + if(isset($ifcfg['virtual'])) + continue; + $gw = get_interface_gateway($ifdescr); + if (is_ipaddr($gw) && is_ipaddr($ifcfg['ip'])) + $ipfrules .= "pass out route-to ( {$ifcfg['if']} {$gw} ) from {$ifcfg['ip']} to any keep state allow-opts label \"let out anything from firewall host itself\"\n"; + } + /* add ipsec interfaces */ if(isset($config['ipsec']['enable']) || isset($config['ipsec']['mobileclients']['enable']))