diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2007-05-29 21:50:29 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2007-05-29 21:50:29 +0000 |
| commit | 676d63fc8901538ee92b5c84d33b4ff9b5db1ef5 (patch) | |
| tree | b3b8aaba6862c1706236e6e06c332cbb99352164 /etc | |
| parent | 8912e4054821a4b67e68d984256f5c82fb84daab (diff) | |
| download | pfsense-676d63fc8901538ee92b5c84d33b4ff9b5db1ef5.zip pfsense-676d63fc8901538ee92b5c84d33b4ff9b5db1ef5.tar.gz | |
Pass gre in any direction.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 65775c8..26748cf 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2457,10 +2457,10 @@ EOD; # allow PPTP client anchor "pptpclient" -pass in quick on \$wan proto gre from any to any modulate state label "allow PPTP client" -pass out quick on \$wan proto gre from any to any modulate state label "allow PPTP client" -pass in quick on \$wan proto tcp from any port = 1723 to any flags S/SA modulate state label "allow PPTP client" -pass out quick on \$wan proto tcp from any to any port = 1723 flags S/SA modulate state label "allow PPTP client" +pass quick on \$wan proto gre from any to any modulate state label "allow PPTP client" +pass quick on \$wan proto gre from any to any modulate state label "allow PPTP client" +pass quick on \$wan proto tcp from any port = 1723 to any flags S/SA modulate state label "allow PPTP client" +pass quick on \$wan proto tcp from any to any port = 1723 flags S/SA modulate state label "allow PPTP client" EOD; } @@ -2614,7 +2614,7 @@ EOD; # PPTPd rules anchor "pptp" -pass in quick on \$wan proto gre from any to $pptpdtarget modulate state label "allow gre pptpd" +pass quick proto gre from any to $pptpdtarget modulate state label "allow gre pptpd" pass in quick on \$wan proto tcp from any to $pptpdtarget port = 1723 modulate state label "allow pptpd {$pptpdtarget}" EOD; @@ -3281,4 +3281,4 @@ function return_vpn_subnet($adr) { } -?> +?>
\ No newline at end of file |
