Move $rule portion out of the ng0 check that accidently slipped in. This

combined with my earlier change unbreaks traffic from the firewall itself
and also unbreaks nat redirect traffic.

Found-by: Billm
This commit is contained in:
Scott Ullrich 2008-01-17 03:15:23 +00:00
parent 4cf7e74ea2
commit dfd852d6ef

View File

@ -3048,8 +3048,8 @@ function create_firewall_outgoing_rules_to_itself() {
if ($config['interfaces'][$ifname]['ipaddr'] == "pppoe") {
$int = " { " . filter_translate_type_to_real_interface($ifname) . " ng0 } ";
/* first add a rule for the real interface, then for ng0 */
$rule .="pass out quick on {$int} all keep state label \"let out anything from firewall host itself\"\n";
}
$rule .="pass out quick on {$int} all keep state label \"let out anything from firewall host itself\"\n";
}
update_filter_reload_status("Setting up bridging items");