summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorsmos <seth.mos@dds.nl>2011-12-20 20:55:54 +0100
committersmos <seth.mos@dds.nl>2011-12-20 21:02:06 +0100
commit9ae39b01fb7dfd9c27091e3fae7e034e9e115519 (patch)
tree33ca22e7c9dcb869c4009f49774a5df77a5fffa5 /etc/inc
parenta56a7ee9d41af90605612f31f476fc25c83eb0b2 (diff)
downloadpfsense-9ae39b01fb7dfd9c27091e3fae7e034e9e115519.zip
pfsense-9ae39b01fb7dfd9c27091e3fae7e034e9e115519.tar.gz
Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs
Ticket #2057 in redmine
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 53ec7d6..11204bc 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2173,7 +2173,7 @@ function filter_generate_user_rule($rule) {
$line = "";
/* exception(s) to a user rules can go here. */
/* rules with a gateway or pool should create another rule for routing to vpns */
- if(($aline['route'] <> "") && (trim($aline['type']) == "pass") && strstr($dst, "any")) {
+ if((($aline['route'] <> "") && (trim($aline['type']) == "pass") && strstr($dst, "any")) && (!isset($config['system']['disablenegate']))) {
/* negate VPN/PPTP/PPPoE/Static Route networks for load balancer/gateway rules */
$negate_networks = " to <negate_networks> ";
$line .= $aline['type'] . $aline['direction'] . $aline['log'] . $aline['quick'] .
OpenPOWER on IntegriCloud