diff options
| author | Chris Buechler <cmb@pfsense.org> | 2013-08-01 21:42:46 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2013-08-01 21:43:56 -0500 |
| commit | 653bde345e8f960de5bc745fe74e64d8ef3fd2d3 (patch) | |
| tree | b9b25ac9f189cc4e7b79e31fa28e4bae52b070fb /etc/inc/filter.inc | |
| parent | 887d1b082d3f97d9446bb90d666b17691f38783b (diff) | |
| download | pfsense-653bde345e8f960de5bc745fe74e64d8ef3fd2d3.zip pfsense-653bde345e8f960de5bc745fe74e64d8ef3fd2d3.tar.gz | |
the state type is required/valid for all specifications of protocol, not
just the ones formerly listed. For instance, sloppy is valid (and widely
used on 2.0.x and some older 2.1x) with "any" protocol.
Diffstat (limited to 'etc/inc/filter.inc')
| -rw-r--r-- | etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index bcd8931..154e312 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2334,7 +2334,7 @@ function filter_generate_user_rule($rule) { $aline['flags'] = "flags S/SA "; } } - if (in_array($rule['protocol'], array("icmp","udp","tcp","tcp/udp")) && ($type == "pass")) { + if ($type == "pass") { /* * # keep state * works with TCP, UDP, and ICMP. |
