diff options
| author | Erik Fonnesbeck <efonnes@gmail.com> | 2010-05-04 22:27:57 -0600 |
|---|---|---|
| committer | Erik Fonnesbeck <efonnes@gmail.com> | 2010-05-04 22:27:57 -0600 |
| commit | 9fc22c6f56e90a7071f6dd2f915eff23f9f786fb (patch) | |
| tree | 1deb19b2089c9fda772b10e8419a7a783a62cbe9 /usr/local/www/system_advanced_firewall.php | |
| parent | c8bbe66fb55e69f2a3caa70d0ee48d0e47c7c84d (diff) | |
| download | pfsense-9fc22c6f56e90a7071f6dd2f915eff23f9f786fb.zip pfsense-9fc22c6f56e90a7071f6dd2f915eff23f9f786fb.tar.gz | |
Add configuration option in System: Advanced: Firewall/NAT for NAT reflection on 1:1 NAT.
Diffstat (limited to 'usr/local/www/system_advanced_firewall.php')
| -rw-r--r-- | usr/local/www/system_advanced_firewall.php | 22 |
1 files changed, 19 insertions, 3 deletions
diff --git a/usr/local/www/system_advanced_firewall.php b/usr/local/www/system_advanced_firewall.php index e8a4173..fbfcdef 100644 --- a/usr/local/www/system_advanced_firewall.php +++ b/usr/local/www/system_advanced_firewall.php @@ -56,6 +56,10 @@ $pconfig['tcpidletimeout'] = $config['filter']['tcpidletimeout']; $pconfig['optimization'] = $config['filter']['optimization']; $pconfig['maximumstates'] = $config['system']['maximumstates']; $pconfig['disablenatreflection'] = $config['system']['disablenatreflection']; +if (!isset($config['system']['enablebinatreflection'])) + $pconfig['disablebinatreflection'] = "yes"; +else + $pconfig['disablebinatreflection'] = ""; $pconfig['bypassstaticroutes'] = isset($config['filter']['bypassstaticroutes']); $pconfig['disablescrub'] = isset($config['system']['disablescrub']); $pconfig['tftpinterface'] = $config['system']['tftpinterface']; @@ -105,7 +109,12 @@ if ($_POST) { $config['system']['disablenatreflection'] = $_POST['disablenatreflection']; else unset($config['system']['disablenatreflection']); - + + if($_POST['disablebinatreflection'] == "yes") + unset($config['system']['enablebinatreflection']); + else + $config['system']['enablebinatreflection'] = "yes"; + if($_POST['bypassstaticroutes'] == "yes") $config['filter']['bypassstaticroutes'] = $_POST['bypassstaticroutes']; else @@ -292,10 +301,17 @@ function update_description(itemnum) { <td colspan="2" valign="top" class="listtopic">Network Address Translation</td> </tr> <tr> - <td width="22%" valign="top" class="vncell">Disable NAT Reflection</td> + <td width="22%" valign="top" class="vncell">Disable NAT Reflection for port forwards</td> <td width="78%" class="vtable"> <input name="disablenatreflection" type="checkbox" id="disablenatreflection" value="yes" <?php if (isset($config['system']['disablenatreflection'])) echo "checked"; ?> /> - <strong>Disables the automatic creation of NAT redirect rules for access to your public IP addresses from within your internal networks. Note: Reflection is only enabled for port forward entries.</strong> + <strong>Disables the automatic creation of additional NAT redirect rules for access to port forwards on your public IP addresses from within your internal networks. Note: Reflection might not fully work in complex routing scenarios.</strong> + </td> + </tr> + <tr> + <td width="22%" valign="top" class="vncell">Disable NAT Reflection for 1:1 NAT</td> + <td width="78%" class="vtable"> + <input name="disablebinatreflection" type="checkbox" id="disablebinatreflection" value="yes" <?php if (!isset($config['system']['enablebinatreflection'])) echo "checked"; ?> /> + <strong>Disables the automatic creation of additional NAT 1:1 mappings for access to 1:1 mappings of your public IP addresses from within your internal networks. Note: Reflection might not fully work in complex routing scenarios.</strong> </td> </tr> <tr> |
