Allow any port to go out for CP. This should unbreak traffic of CP rdr!

This commit is contained in:
Ermal 2010-12-28 00:36:41 +00:00
parent 23d69b985c
commit e240969e05

View File

@ -2068,7 +2068,7 @@ EOD;
$cpinterface = implode(" ", $cpiflist);
$cpaddresses = implode(" ", $cpiplist);
$ipfrules .= "pass in {$log} quick on { {$cpinterface} } proto tcp from any to { {$cpaddresses} } port { 8000 8001 } keep state(sloppy)\n";
$ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any port { 8000 8001 80 } to any flags any keep state(sloppy)\n";
$ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any to any flags any keep state(sloppy)\n";
}
}
@ -2759,4 +2759,4 @@ function discover_pkg_rules($ruletype) {
return $rules;
}
?>
?>