summaryrefslogtreecommitdiffstats
path: root/usr
diff options
context:
space:
mode:
authorErik Fonnesbeck <efonnes@gmail.com>2010-11-22 11:16:27 -0700
committerErik Fonnesbeck <efonnes@gmail.com>2010-11-22 11:38:59 -0700
commita2b6c52f720f9fbfe35ccd9ddf7f607d08e80346 (patch)
tree9bed5deeba242953e274d017c29a4fc11422da46 /usr
parentbddcbff2742d2855aa47b7af551aee11410183ca (diff)
downloadpfsense-a2b6c52f720f9fbfe35ccd9ddf7f607d08e80346.zip
pfsense-a2b6c52f720f9fbfe35ccd9ddf7f607d08e80346.tar.gz
Add option to control automatic creation of NAT rules which assist forwarding rules that send traffic out to the same subnet it originated from.
Diffstat (limited to 'usr')
-rw-r--r--usr/local/www/system_advanced_firewall.php14
1 files changed, 14 insertions, 0 deletions
diff --git a/usr/local/www/system_advanced_firewall.php b/usr/local/www/system_advanced_firewall.php
index 0a944a9..38d12c1 100644
--- a/usr/local/www/system_advanced_firewall.php
+++ b/usr/local/www/system_advanced_firewall.php
@@ -124,6 +124,11 @@ if ($_POST) {
else
$config['system']['enablebinatreflection'] = "yes";
+ if($_POST['enablenatreflectionhelper'] == "yes")
+ $config['system']['enablenatreflectionhelper'] = "yes";
+ else
+ unset($config['system']['enablenatreflectionhelper']);
+
$config['system']['reflectiontimeout'] = $_POST['reflectiontimeout'];
if($_POST['bypassstaticroutes'] == "yes")
@@ -348,6 +353,15 @@ function update_description(itemnum) {
</td>
</tr>
<tr>
+ <td width="22%" valign="top" class="vncell">&nbsp;</td>
+ <td width="78%" class="vtable">
+ <input name="enablenatreflectionhelper" type="checkbox" id="enablenatreflectionhelper" value="yes" <?php if (isset($config['system']['enablenatreflectionhelper'])) echo "checked"; ?> />
+ <strong><?=gettext("Automatically create outbound NAT rules which assist inbound NAT rules that direct traffic back out to the same subnet it originated from.");?></strong>
+ <br/>
+ <?=gettext("Currently only applies to 1:1 NAT rules. Required for full functionality of NAT Reflection for 1:1 NAT.");?>
+ </td>
+ </tr>
+ <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("TFTP Proxy");?></td>
<td width="78%" class="vtable">
<select name="tftpinterface[]" multiple="true" class="formselect" size="3">
OpenPOWER on IntegriCloud