diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2007-02-03 00:02:35 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2007-02-03 00:02:35 +0000 |
| commit | 2968c3ad3e5aaa11e80517420a4a1013a124ea21 (patch) | |
| tree | 4221569c4b0b9403a275c43975ed74d6a56e72e3 /etc | |
| parent | 8f8caa10d0d01039fbbea83959716cbaa7f81111 (diff) | |
| download | pfsense-2968c3ad3e5aaa11e80517420a4a1013a124ea21.zip pfsense-2968c3ad3e5aaa11e80517420a4a1013a124ea21.tar.gz | |
Allow ICMP on NG0 interface if user is running pppoe
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 50022c1..a7d1863 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2261,6 +2261,13 @@ EOD; } + if($config['interfaces']['wan']['ipaddr'] == "pppoe") + $ipfrules .= <<<EOD +# permit wan interface to ping out (ping_hosts.sh) +pass out quick on ng0 proto icmp keep state label "let out anything from firewall host itself" + +EOD; + if (!isset($config['system']['webgui']['noantilockout'])) { if($lansa and $lansn) { |
