From ad6df0b3cae1b4bc57e63560750e4e358f5416ad Mon Sep 17 00:00:00 2001
From: Ermal <eri@pfsense.org>
Date: Tue, 29 Mar 2011 08:19:50 +0000
Subject: Add back gre allowing rules since they are needed.

---
 etc/inc/filter.inc | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'etc')

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 709d1f6..a1c74cc 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2158,6 +2158,7 @@ EOD;
 				$ipfrules .= <<<EOD
 # allow PPTP client
 pass in on \${$oc['descr']} proto tcp from any to any port = 1723 flags S/SA modulate state label "allow PPTP client on {$oc['descr']}"
+pass in on \${$oc['descr']} proto gre from any to any keep state label "allow PPTP client on {$oc['descr']}"
 
 EOD;
 			break;
@@ -2275,6 +2276,7 @@ EOD;
 			$ipfrules .= <<<EOD
 # PPTPd rules
 pass in on \${$FilterIflist['wan']['descr']} proto tcp from any to $pptpdtarget port = 1723 modulate state label "allow pptpd {$pptpdtarget}"
+pass in on \${$FilterIflist['wan']['descr']} proto gre from any to any keep state label "allow gre pptpd"
 
 EOD;
 
-- 
cgit v1.1