diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-06-28 17:30:07 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-06-28 17:30:07 +0000 |
| commit | 4fd77a143a3e48e1eedc7f47eea77751eef7d24a (patch) | |
| tree | 6b13658d33bfc1f46503aafaa7dc0f79bb3e5d4c /etc/inc | |
| parent | a27baeecf09aaa814fc8794bf1f2e97fce7f77f6 (diff) | |
| download | pfsense-4fd77a143a3e48e1eedc7f47eea77751eef7d24a.zip pfsense-4fd77a143a3e48e1eedc7f47eea77751eef7d24a.tar.gz | |
Only workaround RFC959 on optional interfaces if a gateway is set
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/filter.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 994cb2d..73b4b7f 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1521,7 +1521,8 @@ EOD; $optcfg = array(); generate_optcfg_array($optcfg); foreach($optcfg as $oc) { - $ipfrules .= "pass in quick on {$oc['if']} inet proto tcp from any to ({$oc['if']}) port > 49000 user proxy flags S/SA keep state label \"FTP PROXY: RFC959 violation workaround\" \n"; + if($oc['gateway'] <> "") + $ipfrules .= "pass in quick on {$oc['if']} inet proto tcp from any to ({$oc['if']}) port > 49000 user proxy flags S/SA keep state label \"FTP PROXY: RFC959 violation workaround\" \n"; } } } |
