diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-10-29 16:43:32 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-10-29 16:43:32 +0000 |
| commit | 2bda651ba7ce9c3c0e8505bdbe9370c8bcc2d2dc (patch) | |
| tree | 61ffd80ed20c5a0dec397d992313d81558f376cd /etc/inc | |
| parent | 7cc7e84db4a545c1a0a9d0f84e871763376156f9 (diff) | |
| download | pfsense-2bda651ba7ce9c3c0e8505bdbe9370c8bcc2d2dc.zip pfsense-2bda651ba7ce9c3c0e8505bdbe9370c8bcc2d2dc.tar.gz | |
Do not install anti lockout rule unless both the lan ip is set and a subnet mask
Ticket #655
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/filter.inc | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 4cb26d0..1526948 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1485,13 +1485,16 @@ EOD; if (!isset($config['system']['webgui']['noantilockout'])) { - $ipfrules .= <<<EOD + if($lansa and $lansn) { + + $ipfrules .= <<<EOD # make sure the user cannot lock himself out of the webGUI or SSH anchor "anti-lockout" pass in quick from {$lansa}/{$lansn} to $lanip keep state label "anti-lockout web rule" EOD; + } } /* PPTPd enabled? */ |
