mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

MFC 7140

Browse Source 
Only install wan spoof check rule if a lan ip address is set
This commit is contained in:
Scott Ullrich 2005-10-25 01:29:14 +00:00
parent f70c887f25
commit dd084ea51b
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/inc/filter.inc
View File

@ -364,17 +364,15 @@ function filter_nat_rules_generate_if($if, $src, $srcport, $dst, $natport, $targ
if ($dst == "")
$dst = "any";
/* Match on this destination port */
if ($natport)
$dst .= " port {$natport}";
/* Match on this source port */
if ($srcport)
$src .= " port {$srcport}";
/* set the source port the world sees */
if ($srcport)
$srcport_rule .= " port {$srcport}";
else
$srcport_rule = "";
if ($natport)
$second_half_of_rule .= " port {$natport}";
$natrule = "{$nat} on {$if} from {$src}{$srcport_rule} to {$dst} {$second_half_of_rule}\n";
$natrule = "{$nat} on {$if} from {$src} to {$dst} {$second_half_of_rule}\n";
return $natrule;
}
@ -1356,13 +1354,17 @@ EOD;
}
}
$ipfrules .= <<<EOD
/* install wan spoof check rule if lan address exists */
if($lansa) {
$ipfrules .= <<<EOD
# WAN spoof check
anchor "wanspoof"
block in $log quick on $wanif from $lansa/$lansn to any label "WAN spoof check"
EOD;
}
foreach ($optcfg as $oc) {
if (!$oc['bridge'])