diff options
| author | Ermal <eri@pfsense.org> | 2011-07-06 21:19:53 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2011-07-06 21:19:53 +0000 |
| commit | 66977fc7fb7c429cfb85a8b5890797600852323f (patch) | |
| tree | d829e8af0abfd2a0668bced156ba8a253a8ec91f | |
| parent | 8ed478973f20678568f03f00309a5165aa48a1b3 (diff) | |
| download | pfsense-66977fc7fb7c429cfb85a8b5890797600852323f.zip pfsense-66977fc7fb7c429cfb85a8b5890797600852323f.tar.gz | |
Ticket #1646. Put netmasks of /32 to the parameters of pfctl -b to avoid that ocassions it matches more than it should.
| -rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index dc6b95f..b3c38a0 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -170,9 +170,9 @@ function filter_delete_states_for_down_gateways() { if (!is_ipaddr($gwip)) $gwip = get_interface_gateway($gateway['friendlyiface']); if (is_ipaddr($gwstatus['srcip'])) { - $cmd = "/sbin/pfctl -b {$gwstatus['srcip']} "; + $cmd = "/sbin/pfctl -b {$gwstatus['srcip']}/32 "; if (is_ipaddr($gwip)) - $cmd .= "-b {$gwip}"; + $cmd .= "-b {$gwip}/32"; mwexec($cmd); } } |
