diff options
| author | Ermal <eri@pfsense.org> | 2010-09-01 21:52:06 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2010-09-01 21:52:53 +0000 |
| commit | 00621aeefea3950c663810925c40fc71e19fc74d (patch) | |
| tree | 257328afb7530711c2feca5ebee7074e160888e4 | |
| parent | 56c100ab3499d7609ec0f807a551a34f98e198fc (diff) | |
| download | pfsense-00621aeefea3950c663810925c40fc71e19fc74d.zip pfsense-00621aeefea3950c663810925c40fc71e19fc74d.tar.gz | |
Add even carp ips to the sloppy state filter rules of CP.
| -rw-r--r-- | etc/inc/filter.inc | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 819a54f..faa99da 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1900,8 +1900,19 @@ function filter_rules_generate() { if(!empty($tmpif)) { $cpiflist[] = "{$tmpif}"; $cpipm = get_interface_ip($cpifgrp); - if(is_ipaddr($cpipm)) + if(is_ipaddr($cpipm)) { + $carpif = link_ip_to_carp_interface($cpipm); + if (!empty($carpif)) { + $cpiflist[] = $carpif; + $carpsif = explode(" ", $carpif); + foreach ($carpsif as $cpcarp) { + $carpip = find_interface_ip($cpcarp); + if (is_ipaddr($carpip)) + $cpiplist[] = $carpip; + } + } $cpiplist[] = $cpipm; + } } } if (count($cpiplist) > 0 && count($cpiflist) > 0) { |
