From e240969e055e8519eba2cc3ffc0a0bcd4f8ebf4d Mon Sep 17 00:00:00 2001 From: Ermal Date: Tue, 28 Dec 2010 00:36:41 +0000 Subject: [PATCH] Allow any port to go out for CP. This should unbreak traffic of CP rdr! --- etc/inc/filter.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index f8c3065e45..7564a2398c 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2068,7 +2068,7 @@ EOD; $cpinterface = implode(" ", $cpiflist); $cpaddresses = implode(" ", $cpiplist); $ipfrules .= "pass in {$log} quick on { {$cpinterface} } proto tcp from any to { {$cpaddresses} } port { 8000 8001 } keep state(sloppy)\n"; - $ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any port { 8000 8001 80 } to any flags any keep state(sloppy)\n"; + $ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any to any flags any keep state(sloppy)\n"; } } @@ -2759,4 +2759,4 @@ function discover_pkg_rules($ruletype) { return $rules; } -?> \ No newline at end of file +?>