diff options
| author | jim-p <jimp@pfsense.org> | 2016-12-06 10:59:51 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2016-12-06 10:59:51 -0500 |
| commit | 9c8ce38b01fb59dbd474367f77e8de67655f0275 (patch) | |
| tree | 8e1f6b63d470a1143b05654a9eb7c5eda82fb038 | |
| parent | 3dd6ce64c1479a56845cba6644aad62103aa4694 (diff) | |
| download | pfsense-9c8ce38b01fb59dbd474367f77e8de67655f0275.zip pfsense-9c8ce38b01fb59dbd474367f77e8de67655f0275.tar.gz | |
Work around the NPt rule loading issue to load the rules as they were on previous versions. Fixes #6985
| -rw-r--r-- | src/etc/inc/filter.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/etc/inc/filter.inc b/src/etc/inc/filter.inc index af9c082..44e0752 100644 --- a/src/etc/inc/filter.inc +++ b/src/etc/inc/filter.inc @@ -1927,8 +1927,8 @@ function filter_nat_rules_generate() { $natif = $FilterIflist[$natif]['descr']; $natrules .= "binat on \${$natif} from {$srcaddr} to any -> {$dstaddr}\n"; - /* This second line breaks pf on pfSense 2.4/FreeBSD 11. See https://redmine.pfsense.org/issues/6985 */ - $natrules .= "# binat on \${$natif} from any to {$dstaddr} -> {$srcaddr}\n"; + /* pf won't accept 'any' here on pfSense 2.4/FreeBSD 11 but will happily take '::/0'. See https://redmine.pfsense.org/issues/6985 */ + $natrules .= "binat on \${$natif} from ::/0 to {$dstaddr} -> {$srcaddr}\n"; } } |
