mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

MFC 7235

Browse Source 
Do not install anti-spoof rules if user has disabled.

Huge-pointy-hat-to: Me
This commit is contained in:
Scott Ullrich 2005-10-29 19:40:39 +00:00
parent f315165a6d
commit fc19005f9b
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
etc/inc/filter.inc
View File

@ -2,8 +2,8 @@
/* $Id$ */
/*
filter.inc
Copyright (C) 2004 Scott Ullrich
Copyright (C) 2005 Bill Marquette
Copyright (C) 2004,2005 Scott Ullrich
Copyright (C) 2005 Bill Marquette
All rights reserved.
originally part of m0n0wall (http://m0n0.ch/wall)
@ -1367,14 +1367,16 @@ EOD;
/* install wan spoof check rule if lan address exists */
if($lansa) {
$ipfrules .= <<<EOD
if(!isset($config['interfaces']['wan']['spoofmac'])) {
$ipfrules .= <<<EOD
# WAN spoof check
anchor "wanspoof"
block in $log quick on $wanif from $lansa/$lansn to any label "WAN spoof check"
EOD;
}
}
foreach ($optcfg as $oc) {
@ -2035,4 +2037,4 @@ function return_vpn_subnet($adr) {
return " # error - {$adr['network']} ";
}
?>
?>