summaryrefslogtreecommitdiffstats
path: root/usr/local/www/firewall_rules_edit.php
diff options
context:
space:
mode:
authorpierrepomes <pierre.pomes@interface-tech.com>2009-12-13 09:14:55 -0500
committerpierrepomes <pierre.pomes@interface-tech.com>2009-12-13 09:14:55 -0500
commita56b2fa034022bdfa1e9dab08e2758792a1098f4 (patch)
tree27c4070cecba970beb5e7a0c91d775e3c5be0a0b /usr/local/www/firewall_rules_edit.php
parentfa03b3c1d117cef18dbe0f4b1081e072b752e441 (diff)
downloadpfsense-a56b2fa034022bdfa1e9dab08e2758792a1098f4.zip
pfsense-a56b2fa034022bdfa1e9dab08e2758792a1098f4.tar.gz
Add missing PF 'max' tracking option , and clarify message for 'max-src-nodes'
Diffstat (limited to 'usr/local/www/firewall_rules_edit.php')
-rwxr-xr-xusr/local/www/firewall_rules_edit.php7
1 files changed, 5 insertions, 2 deletions
diff --git a/usr/local/www/firewall_rules_edit.php b/usr/local/www/firewall_rules_edit.php
index a0ce08a..3f8874b 100755
--- a/usr/local/www/firewall_rules_edit.php
+++ b/usr/local/www/firewall_rules_edit.php
@@ -131,6 +131,7 @@ if (isset($id) && $a_filter[$id]) {
$pconfig['allowopts'] = true;
/* advanced */
+ $pconfig['max'] = $a_filter[$id]['max'];
$pconfig['max-src-nodes'] = $a_filter[$id]['max-src-nodes'];
$pconfig['max-src-conn'] = $a_filter[$id]['max-src-conn'];
$pconfig['max-src-states'] = $a_filter[$id]['max-src-states'];
@@ -382,6 +383,7 @@ if ($_POST) {
$filterent['allowopts'] = true;
else
unset($filterent['allowopts']);
+ $filterent['max'] = $_POST['max'];
$filterent['max-src-nodes'] = $_POST['max-src-nodes'];
$filterent['max-src-conn'] = $_POST['max-src-conn'];
$filterent['max-src-states'] = $_POST['max-src-states'];
@@ -962,8 +964,9 @@ include("head.inc");
<input name="tagged" id="tagged" value="<?=htmlspecialchars($pconfig['tagged']);?>">
<br /><span class="vexpl"><?=gettext("You can match packet on a mark placed before on another rule.")?>
</span> <p>
- <input name="max-src-nodes" id="max-src-nodes" value="<?php echo $pconfig['max-src-nodes'] ?>"><br> Simultaneous client connection limit<p>
- <input name="max-src-conn" id="max-src-conn" value="<?php echo $pconfig['max-src-conn'] ?>"><br> Maximum established TCP connections per host<p>
+ <input name="max" id="max" value="<?php echo $pconfig['max'] ?>"><br> Maximum state entries this rule can create<p>
+ <input name="max-src-nodes" id="max-src-nodes" value="<?php echo $pconfig['max-src-nodes'] ?>"><br> Maximum number of unique source host<p>
+ <input name="max-src-conn" id="max-src-conn" value="<?php echo $pconfig['max-src-conn'] ?>"><br> Maximum number of established TCP connections per host<p>
<input name="max-src-states" id="max-src-states" value="<?php echo $pconfig['max-src-states'] ?>"><br> Maximum state entries per host<p>
<input name="max-src-conn-rate" id="max-src-conn-rate" value="<?php echo $pconfig['max-src-conn-rate'] ?>"> /
<select name="max-src-conn-rates" id="max-src-conn-rates">
OpenPOWER on IntegriCloud