mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Alter ftp-proxy rules a little bit. Be sure to let the firewall itself to allow outgoing proxy traffic.

Browse Source
This commit is contained in:
Scott Ullrich 2005-01-31 19:56:53 +00:00
parent 75c75837f8
commit c9ab5ae1a9
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
etc/inc/filter.inc
View File

@ -881,8 +881,8 @@ function filter_rules_generate() {
/* if squid is installed, lets install its rule */
$squid_installed = run_command_return_string("/bin/ls /var/db/pkg/ | grep squid");
if ($squid_installed <> "") {
$ipfrules .= "pass in on " . $lanif . " inet proto tcp from any to 127.0.0.1 port 3128 keep state label \"transparent proxy\"\n";
$ipfrules .= "pass out on " . $wanif . " inet proto tcp from any to any port www keep state label \"transparent proxy\"\n";
$ipfrules .= "pass in quick on " . $lanif . " inet proto tcp from any to 127.0.0.1 port 3128 keep state label \"transparent proxy\"\n";
$ipfrules .= "pass out quick on " . $wanif . " inet proto tcp from any to any port www keep state label \"transparent proxy\"\n";
}
$ipfrules .= <<<EOD
@ -891,8 +891,12 @@ function filter_rules_generate() {
pass in quick on lo0 all label "pass loopback"
pass out quick on lo0 all label "pass loopback"
# pass traffic from firewall -> out
pass out quick on $wanif inet proto tcp from $wanif to any keep state
# enable ftp-proxy
pass in on $wanif inet proto tcp from port 20 to ($wanif) user proxy flags S/SA keep state
pass in quick on $wanif inet proto tcp from port 20 to ($wanif) user proxy flags S/SA keep state
pass in quick on $wanif inet proto tcp from any to $wanif port > 49000 user proxy keep state
# allow access to DHCP server on LAN
pass in quick on $lanif proto udp from any port = 68 to 255.255.255.255 port = 67 label "allow access to DHCP server on LAN"