From fc19005f9b7ca8648cae2c820426fd6413f13086 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Sat, 29 Oct 2005 19:40:39 +0000
Subject: [PATCH] MFC 7235 Do not install anti-spoof rules if user has
 disabled.

Huge-pointy-hat-to: Me
---
 etc/inc/filter.inc | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 152694838d..bad73e0749 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2,8 +2,8 @@
 /* $Id$ */
 /*
 	filter.inc
-	Copyright (C) 2004 Scott Ullrich
-        Copyright (C) 2005 Bill Marquette
+	Copyright (C) 2004,2005 Scott Ullrich
+        Copyright (C) 2005 	Bill Marquette
 	All rights reserved.
 
 	originally part of m0n0wall (http://m0n0.ch/wall)
@@ -1367,14 +1367,16 @@ EOD;
 
 	/* install wan spoof check rule if lan address exists */
 	if($lansa) {
-
-		$ipfrules .= <<<EOD
+		if(!isset($config['interfaces']['wan']['spoofmac'])) {
+			$ipfrules .= <<<EOD
 
 # WAN spoof check
 anchor "wanspoof"
 block in $log quick on $wanif from $lansa/$lansn to any label "WAN spoof check"
 
 EOD;
+
+		}
 	}
 
 	foreach ($optcfg as $oc) {
@@ -2035,4 +2037,4 @@ function return_vpn_subnet($adr) {
 	return " # error - {$adr['network']} ";
 	
 }
-?>
+?>
\ No newline at end of file