summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2010-04-30 16:15:24 +0000
committerErmal <eri@pfsense.org>2010-04-30 16:15:24 +0000
commit1f877c943d1fbf17e583c3c0b008b7aa902270dd (patch)
tree9f9ca0b3768e3ba1a83efabc8eadfd4ba40ab993
parent9bfa3d47c2c62252a755a43f32ff0e9c23092c80 (diff)
downloadpfsense-1f877c943d1fbf17e583c3c0b008b7aa902270dd.zip
pfsense-1f877c943d1fbf17e583c3c0b008b7aa902270dd.tar.gz
Make sure package rules are last. As the way they are coded they will null out entire rulesets. More work is needed to make them 2.0 comliant but for now this is enough.
-rw-r--r--etc/inc/filter.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index f44482d..2c3ecae 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -237,7 +237,7 @@ function filter_configure_sync() {
$rules .= "set limit states {$max_states}\n";
}
- $rules .= discover_pkg_rules("pfearly");
+ //$rules .= discover_pkg_rules("pfearly");
// Configure flowtable support if enabled.
flowtable_configure();
@@ -1701,7 +1701,7 @@ function filter_rules_generate() {
$pptpdcfg = $config['pptpd'];
$pppoecfg = $config['pppoe'];
- $ipfrules .= discover_pkg_rules("filter");
+ //$ipfrules .= discover_pkg_rules("filter");
/* if captive portal is enabled, ensure that access to this port
* is allowed on a locked down interface
OpenPOWER on IntegriCloud