diff options
| author | Ermal <eri@pfsense.org> | 2012-11-15 14:27:30 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2012-11-15 14:27:30 +0000 |
| commit | db44954ced0ff775ba0cbadd3409dddd4af0fe64 (patch) | |
| tree | 622dc31358781a25fe46ff434c76a12737054328 /etc | |
| parent | 86672d44875cf51ad13c80eeafbfb5d48a5ac894 (diff) | |
| download | pfsense-db44954ced0ff775ba0cbadd3409dddd4af0fe64.zip pfsense-db44954ced0ff775ba0cbadd3409dddd4af0fe64.tar.gz | |
For destination tolerate a 0.0.0.0/0 and convert it to any
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index b771de0..64c3c31 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1452,10 +1452,12 @@ function filter_nat_rules_generate() { if (!is_subnet($natlocal_subnet) && !is_ipaddr($natlocal_subnet)) continue; $remote_subnet = ipsec_idinfo_to_cidr($ph2ent['remoteid']); - if (empty($remote_subnet) || $remote_subnet == "0.0.0.0/0") + if (empty($remote_subnet)) continue; if (!is_subnet($remote_subnet) && !is_ipaddr($remote_subnet)) continue; + if ($remote_subnet == "0.0.0.0/0") + $remote_subnet = "any"; $natrules .= "binat on enc0 from {$local_subnet} to {$remote_subnet} -> {$natlocal_subnet}\n"; } } |
