From 4ed746322f54f41a0f2cbb7376c023b24cbf1dc8 Mon Sep 17 00:00:00 2001 From: Seth Mos Date: Sat, 4 Aug 2007 20:21:42 +0000 Subject: Static port the mobile ipsec port 4500 --- etc/inc/filter.inc | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) (limited to 'etc') diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 50ceb3d..45d2006 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -699,6 +699,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($wanif, "{$lansa}/{$lancfg['subnet']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($wanif, + "{$lansa}/{$lancfg['subnet']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($wanif, "{$lansa}/{$lancfg['subnet']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($wanif, "{$lansa}/{$lancfg['subnet']}"); @@ -713,6 +715,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($opt_interface, "{$lansa}/{$lancfg['subnet']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($opt_interface, + "{$lansa}/{$lancfg['subnet']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($opt_interface, "{$lansa}/{$lancfg['subnet']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($opt_interface, "{$lansa}/{$lancfg['subnet']}"); @@ -731,6 +735,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($wanif, "{$optsa}/{$optcfg['subnet']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($wanif, + "{$optsa}/{$optcfg['subnet']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($wanif, "{$optsa}/{$optcfg['subnet']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($wanif, "{$optsa}/{$optcfg['subnet']}", null, "", null, null, null, isset($optcfg['nonat'])); @@ -742,6 +748,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($opt_interface, "{$optsa}/{$optcfg['subnet']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($opt_interface, + "{$optsa}/{$optcfg['subnet']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($opt_interface, "{$optsa}/{$optcfg['subnet']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($opt_interface, "{$optsa}/{$optcfg['subnet']}", null, "", null, null, null, isset($optcfg['nonat'])); @@ -758,6 +766,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($wanif, "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($wanif, + "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($wanif, "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($wanif, "{$pptpdcfg['remoteip']}/{$pptp_subnet}"); @@ -769,6 +779,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($opt_interface, + "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pptpdcfg['remoteip']}/{$pptp_subnet}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pptpdcfg['remoteip']}/{$pptp_subnet}"); @@ -784,6 +796,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($wanif, "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($wanif, + "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($wanif, "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($wanif, "{$pppoecfg['remoteip']}/{$pppoe_subnet}"); @@ -795,6 +809,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($opt_interface, + "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pppoecfg['remoteip']}/{$pppoe_subnet}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($opt_interface, "{$pppoecfg['remoteip']}/{$pppoe_subnet}"); @@ -810,6 +826,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($wanif, "{$route['network']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($wanif, + "{$route['network']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($wanif, "{$route['network']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($wanif, "{$route['network']}", "", null); @@ -821,6 +839,8 @@ function filter_nat_rules_generate() { $natrules .= filter_nat_rules_generate_if($opt_interface, "{$route['network']}", 500, "", 500, null, 500, false); $natrules .= filter_nat_rules_generate_if($opt_interface, + "{$route['network']}", 4500, "", 4500, null, 4500, false); + $natrules .= filter_nat_rules_generate_if($opt_interface, "{$route['network']}", 5060, "", 5060, null, 5060, false); $natrules .= filter_nat_rules_generate_if($opt_interface, "{$route['network']}", "", null); -- cgit v1.1