diff options
author | Ermal Luçi <eri@pfsense.org> | 2010-02-09 22:24:58 +0000 |
---|---|---|
committer | Ermal Luçi <eri@pfsense.org> | 2010-02-09 22:24:58 +0000 |
commit | 9868f81861f3ef2eded65fd8b4a62d55f8b737a7 (patch) | |
tree | 7dcf14c25ff5919f2558e41dad4707327f924e3f /etc | |
parent | 2dddf4be0dfb00a5fa4ce0454f400e29a1445088 (diff) | |
download | pfsense-9868f81861f3ef2eded65fd8b4a62d55f8b737a7.zip pfsense-9868f81861f3ef2eded65fd8b4a62d55f8b737a7.tar.gz |
Take care of not failing on multiple interface CP.
Diffstat (limited to 'etc')
-rw-r--r-- | etc/inc/filter.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 2eb644d..f7b169c 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1699,8 +1699,8 @@ function filter_rules_generate() { if (count($cpiplist) > 0 && count($cpiflist) > 0) { $cpinterface = implode(" ", $cpiflist); $cpaddresses = implode(" ", $cpiplist); - $ipfrules .= "pass in quick on {$cpinterface} proto tcp from any to {$cpaddresses} port { 8000 8001 } keep state(sloppy)\n"; - $ipfrules .= "pass out quick on {$cpinterface} proto tcp from {$cpaddresses} port { 8000 8001 } to any keep state(sloppy)\n"; + $ipfrules .= "pass in quick on { {$cpinterface} } proto tcp from any to { {$cpaddresses} } port { 8000 8001 } keep state(sloppy)\n"; + $ipfrules .= "pass out quick on { {$cpinterface} } proto tcp from { {$cpaddresses} } port { 8000 8001 } to any keep state(sloppy)\n"; } } /* relayd */ |