diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2010-11-30 19:52:53 -0500 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2010-11-30 19:52:53 -0500 |
| commit | 50c352669d76f984f3c5269a0359120e3560f837 (patch) | |
| tree | 0768e2bd0f6a0973d6b72a4123933301b9699f04 | |
| parent | 522b72c19345c4d4f4cb5d2fd1f5a68f468ce4ba (diff) | |
| download | pfsense-50c352669d76f984f3c5269a0359120e3560f837.zip pfsense-50c352669d76f984f3c5269a0359120e3560f837.tar.gz | |
Make sure a port is always set. Remove trailing newline
| -rw-r--r-- | etc/inc/filter.inc | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index ed4f8cb..3824c65 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2044,7 +2044,8 @@ EOD; $sshport = $config['system']['ssh']['port']; else $sshport = 22; - $ipfrules .= "block in log quick proto tcp from <sshlockout> to any port {$sshport} label \"sshlockout\"\n"; + if($sshport) + $ipfrules .= "block in log quick proto tcp from <sshlockout> to any port {$sshport} label \"sshlockout\"\n"; } $ipfrules .= "\n# webConfigurator lockout\n"; @@ -2056,7 +2057,8 @@ EOD; } else { $webConfiguratorlockoutport = $config['system']['webgui']['port']; } - $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n"; + if($webConfiguratorlockoutport) + $ipfrules .= "block in log quick proto tcp from <webConfiguratorlockout> to any port {$webConfiguratorlockoutport} label \"webConfiguratorlockout\"\n"; /* * Support for allow limiting of TCP connections by establishment rate @@ -2754,4 +2756,4 @@ function discover_pkg_rules($ruletype) { // vim: ts=4 sw=4 noexpandtab -?> +?>
\ No newline at end of file |
