From dfd852d6efd56d79c0906da378b9f1fb4b143364 Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Thu, 17 Jan 2008 03:15:23 +0000 Subject: [PATCH] Move $rule portion out of the ng0 check that accidently slipped in. This combined with my earlier change unbreaks traffic from the firewall itself and also unbreaks nat redirect traffic. Found-by: Billm --- etc/inc/filter.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index df37b3e491..abe780c3dd 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -3048,8 +3048,8 @@ function create_firewall_outgoing_rules_to_itself() { if ($config['interfaces'][$ifname]['ipaddr'] == "pppoe") { $int = " { " . filter_translate_type_to_real_interface($ifname) . " ng0 } "; /* first add a rule for the real interface, then for ng0 */ - $rule .="pass out quick on {$int} all keep state label \"let out anything from firewall host itself\"\n"; } + $rule .="pass out quick on {$int} all keep state label \"let out anything from firewall host itself\"\n"; } update_filter_reload_status("Setting up bridging items");