mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create advanced outbound NAT rules as user intended and fix negation rules

Browse Source
This commit is contained in:
Bill Marquette 2005-02-20 17:12:55 +00:00
parent 78c80bbc25
commit e9f252faa0
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
etc/inc/filter.inc
View File

@ -640,13 +640,16 @@ function filter_flush_state_table() {
function filter_nat_rules_generate_if($if, $src, $dst, $target) {
global $config;
if ($target)
$tgt = $target . "/32";
else
$tgt = "0/32";
if ($target)
$tgt = $target . "/32";
else
$tgt = "($if)";
if ($dst == "")
$dst = "any";
$natrule = <<<EOD
nat on $if from $src to any -> ($if)
nat on $if from $src to $dst -> $tgt
EOD;
return $natrule;
@ -724,17 +727,14 @@ function filter_nat_rules_generate() {
/* advanced outbound rules */
if (is_array($config['nat']['advancedoutbound']['rule'])) {
foreach ($config['nat']['advancedoutbound']['rule'] as $obent) {
$dst = "";
$src = "";
$src = $obent['source']['network'];
if (!isset($obent['destination']['any'])) {
$src = "from ";
if (isset($obent['destination']['not']))
$dst = "! to ";
$dst = "!" . $obent['destination']['network'];
else
$dst = "to ";
$dst .= $obent['destination']['network'];
$dst = $obent['destination']['network'];
}
$src .= $obent['source']['network'];
if (!$obent['interface'] || ($obent['interface'] == "wan"))
$natif = $wanif;