diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2009-11-16 20:31:18 -0500 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2009-11-16 20:31:18 -0500 |
| commit | 174fa1abe48d6fefbb8c2a0d5d4a611898ae0e72 (patch) | |
| tree | bba4d270b77ab789dfef3afe5bf8a3b611333f3f /usr | |
| parent | 664efd436725e8c48d66ccf5fe31bb151877b828 (diff) | |
| parent | 26dd6a541d0e6d3fac351e5dd8fcc18894a1095a (diff) | |
| download | pfsense-174fa1abe48d6fefbb8c2a0d5d4a611898ae0e72.zip pfsense-174fa1abe48d6fefbb8c2a0d5d4a611898ae0e72.tar.gz | |
Merge branch 'master' of git://rcs.pfsense.org/pfsense/pierrepomes-max-src-conn into review/master
Diffstat (limited to 'usr')
| -rwxr-xr-x | usr/local/www/firewall_rules.php | 2 | ||||
| -rwxr-xr-x | usr/local/www/firewall_rules_edit.php | 3 |
2 files changed, 5 insertions, 0 deletions
diff --git a/usr/local/www/firewall_rules.php b/usr/local/www/firewall_rules.php index 331b607..0a064f6 100755 --- a/usr/local/www/firewall_rules.php +++ b/usr/local/www/firewall_rules.php @@ -48,6 +48,8 @@ function check_for_advaned_options(&$item) { $item_set = ""; if($item['max-src-nodes']) $item_set .= "max-src-nodes {$item['max-src-nodes']} "; + if($item['max-src-conn']) + $item_set .= "max-src-conn {$item['max-src-conn']} "; if($item['max-src-states']) $item_set .= "max-src-states {$item['max-src-states']} "; if($item['statetype'] != "keep state" && $item['statetype'] != "") diff --git a/usr/local/www/firewall_rules_edit.php b/usr/local/www/firewall_rules_edit.php index 834916a..27eb08d 100755 --- a/usr/local/www/firewall_rules_edit.php +++ b/usr/local/www/firewall_rules_edit.php @@ -131,6 +131,7 @@ if (isset($id) && $a_filter[$id]) { /* advanced */ $pconfig['max-src-nodes'] = $a_filter[$id]['max-src-nodes']; + $pconfig['max-src-conn'] = $a_filter[$id]['max-src-conn']; $pconfig['max-src-states'] = $a_filter[$id]['max-src-states']; $pconfig['statetype'] = $a_filter[$id]['statetype']; $pconfig['statetimeout'] = $a_filter[$id]['statetimeout']; @@ -379,6 +380,7 @@ if ($_POST) { else unset($filterent['allowopts']); $filterent['max-src-nodes'] = $_POST['max-src-nodes']; + $filterent['max-src-conn'] = $_POST['max-src-conn']; $filterent['max-src-states'] = $_POST['max-src-states']; $filterent['statetimeout'] = $_POST['statetimeout']; $filterent['statetype'] = $_POST['statetype']; @@ -905,6 +907,7 @@ include("head.inc"); <br /><span class="vexpl"><?=gettext("You can match packet on a mark placed before on another rule.")?> </span> <p> <input name="max-src-nodes" id="max-src-nodes" value="<?php echo $pconfig['max-src-nodes'] ?>"><br> Simultaneous client connection limit<p> + <input name="max-src-conn" id="max-src-conn" value="<?php echo $pconfig['max-src-conn'] ?>"><br> Maximum established TCP connections per host<p> <input name="max-src-states" id="max-src-states" value="<?php echo $pconfig['max-src-states'] ?>"><br> Maximum state entries per host<p> <input name="max-src-conn-rate" id="max-src-conn-rate" value="<?php echo $pconfig['max-src-conn-rate'] ?>"> / <select name="max-src-conn-rates" id="max-src-conn-rates"> |
