diff options
author | Ermal <eri@pfsense.org> | 2010-04-30 16:15:24 +0000 |
---|---|---|
committer | Ermal <eri@pfsense.org> | 2010-04-30 16:15:24 +0000 |
commit | 1f877c943d1fbf17e583c3c0b008b7aa902270dd (patch) | |
tree | 9f9ca0b3768e3ba1a83efabc8eadfd4ba40ab993 | |
parent | 9bfa3d47c2c62252a755a43f32ff0e9c23092c80 (diff) | |
download | pfsense-1f877c943d1fbf17e583c3c0b008b7aa902270dd.zip pfsense-1f877c943d1fbf17e583c3c0b008b7aa902270dd.tar.gz |
Make sure package rules are last. As the way they are coded they will null out entire rulesets. More work is needed to make them 2.0 comliant but for now this is enough.
-rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index f44482d..2c3ecae 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -237,7 +237,7 @@ function filter_configure_sync() { $rules .= "set limit states {$max_states}\n"; } - $rules .= discover_pkg_rules("pfearly"); + //$rules .= discover_pkg_rules("pfearly"); // Configure flowtable support if enabled. flowtable_configure(); @@ -1701,7 +1701,7 @@ function filter_rules_generate() { $pptpdcfg = $config['pptpd']; $pppoecfg = $config['pppoe']; - $ipfrules .= discover_pkg_rules("filter"); + //$ipfrules .= discover_pkg_rules("filter"); /* if captive portal is enabled, ensure that access to this port * is allowed on a locked down interface |