summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2012-10-31 09:43:39 +0000
committerErmal <eri@pfsense.org>2012-10-31 09:43:39 +0000
commit16c95ab93bcfb8d59260aa7564a402a6cec3050d (patch)
tree238dbca159bed12d451497276fb37e1e235d28be
parent3b1385a3febf783f48881b7baf61844f8e91209d (diff)
downloadpfsense-16c95ab93bcfb8d59260aa7564a402a6cec3050d.zip
pfsense-16c95ab93bcfb8d59260aa7564a402a6cec3050d.tar.gz
Revert "Do not put the prefix len on the src ip"
It actually makes sense in IPv6 world This reverts commit 3b1385a3febf783f48881b7baf61844f8e91209d.
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index c810c8f..68c28ad 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2725,7 +2725,7 @@ EOD;
break;
}
if (is_ipaddrv6($gwv6) && is_ipaddrv6($ifcfg['ipv6']))
- $ipfrules .= "pass out route-to ( {$stf} {$gwv6} ) inet6 from {$ifcfg['ipv6']} to !{$ifcfg['ipv6']}/{$pdlen} keep state allow-opts label \"let out anything from firewall host itself\"\n";
+ $ipfrules .= "pass out route-to ( {$stf} {$gwv6} ) inet6 from {$ifcfg['ipv6']}/$pdlen to !{$ifcfg['ipv6']}/{$pdlen} keep state allow-opts label \"let out anything from firewall host itself\"\n";
}
OpenPOWER on IntegriCloud