diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2006-01-02 03:34:27 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2006-01-02 03:34:27 +0000 |
| commit | 3f449e0bf8539e595bf99cf18f1a2056db608c60 (patch) | |
| tree | 1f93d0d5561ec94ad9ab3a99cf8b8bc29de43c28 | |
| parent | 0cd7ed19b74520114d54058b840e4814007f714e (diff) | |
| download | pfsense-3f449e0bf8539e595bf99cf18f1a2056db608c60.zip pfsense-3f449e0bf8539e595bf99cf18f1a2056db608c60.tar.gz | |
Comment out remote to local and local to remote rules. They don't really do anything.
| -rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 04842e5..ed2ab19 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1842,8 +1842,8 @@ EOD; $ipfrules .= "pass out quick on {$wanif} proto ah from {$ipsec_ip} to {$remote_gateway} keep state label \"IPSEC: {$tunnel['descr']} - outbound ah proto\"\n"; $ipfrules .= "pass in quick on {$wanif} proto ah from {$remote_gateway} to {$ipsec_ip} keep state label \"IPSEC: {$tunnel['descr']} - inbound ah proto\"\n"; - $ipfrules .= "pass out quick on {$lanif} from {$tunnel['remote-subnet']} to {$local_subnet} keep state label \"IPSEC: {$tunnel['descr']} - remote to local\"\n"; - $ipfrules .= "pass in quick on {$lanif} from {$local_subnet} to {$tunnel['remote-subnet']} keep state label \"IPSEC: {$tunnel['descr']} - local to remote\"\n"; + //$ipfrules .= "pass out quick on {$lanif} from {$tunnel['remote-subnet']} to {$local_subnet} keep state label \"IPSEC: {$tunnel['descr']} - remote to local\"\n"; + //$ipfrules .= "pass in quick on {$lanif} from {$local_subnet} to {$tunnel['remote-subnet']} keep state label \"IPSEC: {$tunnel['descr']} - local to remote\"\n"; } } |
