summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2005-02-07 04:30:34 +0000
committerScott Ullrich <sullrich@pfsense.org>2005-02-07 04:30:34 +0000
commita46b841a2e33c9d55bd5de62384c52a902d6efcf (patch)
treec4dbb3d29495abb282f2fa19426a8aa92fe968af
parent45ef491b2b35cb2aced564d00db16570f6d959e9 (diff)
downloadpfsense-a46b841a2e33c9d55bd5de62384c52a902d6efcf.zip
pfsense-a46b841a2e33c9d55bd5de62384c52a902d6efcf.tar.gz
only set S/SA on tcp rules
-rw-r--r--etc/inc/filter.inc3
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index b4539a1..ed38208 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1353,7 +1353,8 @@ EOD;
if ($type == "pass") {
if( isset($rule['source-track']) or isset($rule['max-src-nodes']) or isset($rule['max-src-states']) )
- $line .= "flags S/SA ";
+ if($rule['protocol'] == "tcp")
+ $line .= "flags S/SA ";
/*
# keep state
OpenPOWER on IntegriCloud