summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2011-07-15 20:12:24 +0000
committerErmal <eri@pfsense.org>2011-07-15 20:12:37 +0000
commitd470bf7073aad276f95b9ac31428f04c1f2fcccc (patch)
tree219e610574c0723cd260f74b36a2fb8e3044c5ed /etc/inc/filter.inc
parent0b664809a691a37365fc2e60738b5ff9ce7a2c9a (diff)
downloadpfsense-d470bf7073aad276f95b9ac31428f04c1f2fcccc.zip
pfsense-d470bf7073aad276f95b9ac31428f04c1f2fcccc.tar.gz
Ticket #1552. Do not allow route-to to be set on block/reject rules for now. The issue is in the kernel but for 2.0 this protection is enough.
Diffstat (limited to 'etc/inc/filter.inc')
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index cc0d75c..1cd662e 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1830,7 +1830,7 @@ function filter_generate_user_rule($rule) {
}
}
/* if user has selected a custom gateway, lets work with it */
- else if($rule['gateway'] <> "") {
+ else if($rule['gateway'] <> "" && $type == "pass") {
if (isset($GatewaysList[$rule['gateway']]))
/* Add the load balanced gateways */
$aline['route'] = " \$GW{$rule['gateway']} ";
OpenPOWER on IntegriCloud