summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2004-11-21 19:32:46 +0000
committerScott Ullrich <sullrich@pfsense.org>2004-11-21 19:32:46 +0000
commita9a16d0b961e7ac14c0ea151f5f15b8a24d27011 (patch)
treeb569bb6a1581cd457e12020ea96032123a9ddc7e
parentd514874244cc986216d31f4ea8c1a8156186e820 (diff)
downloadpfsense-a9a16d0b961e7ac14c0ea151f5f15b8a24d27011.zip
pfsense-a9a16d0b961e7ac14c0ea151f5f15b8a24d27011.tar.gz
Add backend support for source-track, max-src-nodes and max-src-states.
-rw-r--r--etc/inc/filter.inc11
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 7adb36b..2e87350 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -939,6 +939,17 @@ EOD;
if ($type == "pass") {
$line .= "keep state ";
+
+ if(isset($rule['source-track']) or isset($rule['max-src-nodes']) or isset($rule['max-src-states']) {
+ $line .= "( ";
+ if(isset($rule['source-track'])
+ $line .= " source-track";
+ if(isset($rule['max-src-nodes'])
+ $line .= " max-src-nodes " . $rule['max-src-nodes'];
+ if(isset($rule['max-src-states'])
+ $line .= " max-src-states" . $rule['max-src-states'];
+ $line .= " ) ";
+ }
if (isset($rule['frags']))
$line .= "keep frags ";
OpenPOWER on IntegriCloud