summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRenato Botelho <garga@FreeBSD.org>2014-09-09 09:14:15 -0300
committerRenato Botelho <garga@FreeBSD.org>2014-09-09 09:14:15 -0300
commitb22ef1602bfba55c6b816181bcf61e7b1d5f433e (patch)
tree758bb2b11394f4d5753976ec83d5759227db16e6
parentd629f1ca6949735dd0c766b09d122b3edd6e1169 (diff)
downloadpfsense-b22ef1602bfba55c6b816181bcf61e7b1d5f433e.zip
pfsense-b22ef1602bfba55c6b816181bcf61e7b1d5f433e.tar.gz
As pointed out by Ermal, VIPs should go first in the list since NAT is first match. Ticket #983
-rw-r--r--etc/inc/filter.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 083e77c..e325e56 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1377,8 +1377,8 @@ function filter_nat_rules_automatic_tonathosts($with_descr = false) {
continue 2;
$network = gen_subnet($vip['ip'], $vip['sn']);
- $tonathosts[] = $network . '/' . $vip['sn'];
- $descriptions[] = "Virtual IP ({$oc['descr']})";
+ array_unshift($tonathosts, $network . '/' . $vip['sn']);
+ array_unshift($descriptions, "Virtual IP ({$oc['descr']})");
$if_subnets[] = $network . '/' . $vip['sn'];
unset($network);
}
OpenPOWER on IntegriCloud