diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2006-04-14 18:09:31 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2006-04-14 18:09:31 +0000 |
| commit | ba875d5a98a59e336d0426f1c9d5b9d1b33a6932 (patch) | |
| tree | 05f61188bd05da02e37a2059d25e752023c80ea4 | |
| parent | 3f249fb30db873a22f79fb861ed1ef6bd0d48518 (diff) | |
| download | pfsense-ba875d5a98a59e336d0426f1c9d5b9d1b33a6932.zip pfsense-ba875d5a98a59e336d0426f1c9d5b9d1b33a6932.tar.gz | |
Only setup anti spoof rules if the interface is really enabled
| -rw-r--r-- | etc/inc/filter.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 6776b89..973fce6 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1729,7 +1729,8 @@ EOD; foreach ($optcfg as $oc) { if (!$oc['bridge']) if($oc['sa'] <> "") - $ipfrules .= "block in $log quick on $wanif from {$oc['sa']}/{$oc['sn']} to any label \"interface spoof check\"\n"; + if(isset($oc['enable'])) + $ipfrules .= "block in $log quick on $wanif from {$oc['sa']}/{$oc['sn']} to any label \"interface spoof check\"\n"; } /* allow PPTP traffic if PPTP client is enabled on WAN */ |
