From 594473698158b8fc8830fa2e8fc6ce3959bde81d Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Wed, 14 Oct 2015 01:25:22 -0500
Subject: Auto-add firewall rules for DHCP Relay, same as is done for DHCP
 Server. Add filter reload to DHCP Relay config so rules are immediately
 added/removed. Ticket #4558

---
 etc/inc/filter.inc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'etc')

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 701fbbd..b23b75a 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -3117,6 +3117,19 @@ EOD;
 				}
 
 			}
+			/* allow access to DHCP relay on interfaces */
+			if(isset($config['dhcrelay']['enable'])) {
+				$dhcifaces = explode(",", $dhcrelaycfg['interface']);
+				foreach ($dhcifaces as $dhcrelayif) {
+					if ($dhcrelayif = $on) {
+						$ipfrules .= <<<EOD
+# allow access to DHCP relay on {$oc['descr']}
+pass in {$log['pass']} quick on \${$oc['descr']} proto udp from any port = 68 to 255.255.255.255 port = 67 tracker {$increment_tracker($tracker)} label "allow access to DHCP relay"
+
+EOD;
+					}
+				}
+			}
 			break;
 		}
 
-- 
cgit v1.1