From ea089c29ddf30b2f4179306c2e0cd77d77ec549d Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Tue, 29 May 2007 21:49:34 +0000 Subject: Pass gre in any direction. --- etc/inc/filter.inc | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 119b58a..b1b138d 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2455,10 +2455,10 @@ EOD; # allow PPTP client anchor "pptpclient" -pass in quick on \$wan proto gre from any to any modulate state label "allow PPTP client" -pass out quick on \$wan proto gre from any to any modulate state label "allow PPTP client" -pass in quick on \$wan proto tcp from any port = 1723 to any flags S/SA modulate state label "allow PPTP client" -pass out quick on \$wan proto tcp from any to any port = 1723 flags S/SA modulate state label "allow PPTP client" +pass quick on \$wan proto gre from any to any modulate state label "allow PPTP client" +pass quick on \$wan proto gre from any to any modulate state label "allow PPTP client" +pass quick on \$wan proto tcp from any port = 1723 to any flags S/SA modulate state label "allow PPTP client" +pass quick on \$wan proto tcp from any to any port = 1723 flags S/SA modulate state label "allow PPTP client" EOD; } @@ -2612,7 +2612,7 @@ EOD; # PPTPd rules anchor "pptp" -pass in quick on \$wan proto gre from any to $pptpdtarget modulate state label "allow gre pptpd" +pass quick proto gre from any to $pptpdtarget modulate state label "allow gre pptpd" pass in quick on \$wan proto tcp from any to $pptpdtarget port = 1723 modulate state label "allow pptpd {$pptpdtarget}" EOD; -- cgit v1.1