summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2010-12-28 00:36:41 +0000
committerErmal <eri@pfsense.org>2010-12-28 00:38:29 +0000
commite240969e055e8519eba2cc3ffc0a0bcd4f8ebf4d (patch)
tree36b7fa82e6776f541ce7166db529d91bf7ff70ef
parent23d69b985c50e1afa4b9c2795f0e08e7ea3b83c2 (diff)
downloadpfsense-e240969e055e8519eba2cc3ffc0a0bcd4f8ebf4d.zip
pfsense-e240969e055e8519eba2cc3ffc0a0bcd4f8ebf4d.tar.gz
Allow any port to go out for CP. This should unbreak traffic of CP rdr!
-rw-r--r--etc/inc/filter.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index f8c3065..7564a23 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2068,7 +2068,7 @@ EOD;
$cpinterface = implode(" ", $cpiflist);
$cpaddresses = implode(" ", $cpiplist);
$ipfrules .= "pass in {$log} quick on { {$cpinterface} } proto tcp from any to { {$cpaddresses} } port { 8000 8001 } keep state(sloppy)\n";
- $ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any port { 8000 8001 80 } to any flags any keep state(sloppy)\n";
+ $ipfrules .= "pass out {$log} quick on { {$cpinterface} } proto tcp from any to any flags any keep state(sloppy)\n";
}
}
@@ -2759,4 +2759,4 @@ function discover_pkg_rules($ruletype) {
return $rules;
}
-?> \ No newline at end of file
+?>
OpenPOWER on IntegriCloud