summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
diff options
context:
space:
mode:
authorErmal Luçi <eri@pfsense.org>2009-02-28 19:12:27 +0000
committerErmal Luçi <eri@pfsense.org>2009-02-28 19:12:52 +0000
commitbfdf32ff12e11ef326574aadf4971c3e187e0765 (patch)
treec5326402e2db1981c8312120ca6ebc1d0242b9f5 /etc/inc/filter.inc
parent30bc15cfdc0432dc57dbc80d50ca2430f9e660c1 (diff)
downloadpfsense-bfdf32ff12e11ef326574aadf4971c3e187e0765.zip
pfsense-bfdf32ff12e11ef326574aadf4971c3e187e0765.tar.gz
Move some special packages rule creation after user rules so the latest have precedence over the others.
Diffstat (limited to 'etc/inc/filter.inc')
-rw-r--r--etc/inc/filter.inc35
1 files changed, 19 insertions, 16 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 2da313d..e6f5335 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1828,24 +1828,10 @@ function filter_rules_generate()
$mt = microtime();
echo "filter_rules_generate() being called $mt\n";
}
+
$pptpdcfg = $config['pptpd'];
$pppoecfg = $config['pppoe'];
- if (is_package_installed('clamav') && file_exists('/usr/local/pkg/clamav.inc')) {
- require_once('clamav.inc');
- $ipfrules .= clamav_generate_rules('filter');
- }
- if (is_package_installed('squid') && file_exists('/usr/local/pkg/squid.inc')) {
- require_once('squid.inc');
- $ipfrules .= squid_generate_rules('filter');
- }
- if (is_package_installed('frickin') && file_exists('/usr/local/pkg/frickin.inc')) {
- require_once ('frickin.inc');
- $ipfrules .= frickin_generate_rules('filter');
- }
- if (is_package_installed('siproxd') && file_exists('/usr/local/pkg/siproxd.inc')) {
- require_once('siproxd.inc');
- $ipfrules .= siproxd_generate_rules('filter');
- }
+
/* if captive portal is enabled, ensure that access to this port
* is allowed on a locked down interface
*/
@@ -2184,6 +2170,23 @@ EOD;
update_filter_reload_status("Creating IPsec rules...");
$ipfrules .= generate_ipsec_filter_rules();
+ if (is_package_installed('clamav') && file_exists('/usr/local/pkg/clamav.inc')) {
+ require_once('clamav.inc');
+ $ipfrules .= clamav_generate_rules('filter');
+ }
+ if (is_package_installed('squid') && file_exists('/usr/local/pkg/squid.inc')) {
+ require_once('squid.inc');
+ $ipfrules .= squid_generate_rules('filter');
+ }
+ if (is_package_installed('frickin') && file_exists('/usr/local/pkg/frickin.inc')) {
+ require_once ('frickin.inc');
+ $ipfrules .= frickin_generate_rules('filter');
+ }
+ if (is_package_installed('siproxd') && file_exists('/usr/local/pkg/siproxd.inc')) {
+ require_once('siproxd.inc');
+ $ipfrules .= siproxd_generate_rules('filter');
+ }
+
$ipfrules .= <<<EOD
anchor "limitingesr"
OpenPOWER on IntegriCloud