diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2007-05-29 22:21:36 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2007-05-29 22:21:36 +0000 |
| commit | 46ee323233df07bd6193d9c9463a761b75ea35a9 (patch) | |
| tree | a2f176e2dd047b500aa28c0d667cd25abab68542 /etc/inc/filter.inc | |
| parent | be4237b0ee003ad089476bc6ea536a78fcf4e825 (diff) | |
| download | pfsense-46ee323233df07bd6193d9c9463a761b75ea35a9.zip pfsense-46ee323233df07bd6193d9c9463a761b75ea35a9.tar.gz | |
Really only allow adavanced tunables when some kind of state tracking is enabled.
Diffstat (limited to 'etc/inc/filter.inc')
| -rw-r--r-- | etc/inc/filter.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 6d1d208..9868060 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1962,6 +1962,7 @@ function generate_user_filter_rule($rule, $ngcounter) { if(isset($rule['statetype']) && $rule['statetype'] <> "") { switch($rule['statetype']) { case "none": + $noadvoptions = false; break; case "modulate state": case "synproxy state": @@ -1974,7 +1975,7 @@ function generate_user_filter_rule($rule, $ngcounter) { } else { $aline['flags'] = "keep state "; } - if($aline['flags']) + if($noadvoptions == false) if( isset($rule['source-track']) and $rule['source-track'] <> "" or isset($rule['max-src-nodes']) and $rule['max-src-nodes'] <> "" or isset($rule['max-src-conn-rate']) and $rule['max-src-conn-rate'] <> "" or |
