pfSense

Normally the NEGATE rules will only trigger when the destination is set to "any".

If we change the foreach($config['rules'] as $rule) to a function that returns the firewall rules it should be easier to tack on NEGATE rules, add other rules, all in a fashion that they will also show in the UI.

e.g.

return_firewall_rules() {
 $rules = array();
 $rules = $rules + add_bogon_rules();
 foreach($config['rules'] as $rule) {
  if($negate)
   $rules[] = $negate_rule;
  $rules[] = $rule;
 }
 $rules = $rules + add_v6_delegation_rules();
}

For example. The automatic rules I added for dynamic IPv6 connections need to shown as well. It's less then optimal.