Revision 0e12792d
Added by Ermal LUÇI almost 14 years ago
| etc/inc/filter.inc | ||
|---|---|---|
| 2573 | 2573 |
* topologies |
| 2574 | 2574 |
*/ |
| 2575 | 2575 |
if(isset($config['filter']['bypassstaticroutes']) && is_array($config['staticroutes']['route']) && count($config['staticroutes']['route'])) {
|
| 2576 |
$ipfrules .= "# Add rules to bypass firewall rules for static routes\n":
|
|
| 2576 |
$ipfrules .= "# Add rules to bypass firewall rules for static routes\n";
|
|
| 2577 | 2577 |
foreach ($config['staticroutes']['route'] as $route) {
|
| 2578 | 2578 |
$friendly = $GatewaysList[$route['gateway']]['friendlyiface']; |
| 2579 | 2579 |
if(is_array($FilterIflist[$friendly])) {
|
| ... | ... | |
| 2591 | 2591 |
pass quick on \${$oc['descr']} from {$route['network']} to {$sa}/{$sn} keep state(sloppy) label "pass traffic between statically routed subnets"
|
| 2592 | 2592 |
|
| 2593 | 2593 |
EOD; |
| 2594 |
} |
|
| 2595 | 2594 |
} |
| 2596 | 2595 |
if($oc['ipv6']) {
|
| 2597 | 2596 |
$sa = $oc['sav6']; |
| ... | ... | |
| 2606 | 2605 |
pass quick on \${$oc['descr']} inet6 from {$route['network']} to {$sa}/{$sn} keep state(sloppy) label "pass traffic between statically routed subnets"
|
| 2607 | 2606 |
|
| 2608 | 2607 |
EOD; |
| 2609 |
} |
|
| 2610 | 2608 |
} |
| 2611 | 2609 |
} |
| 2612 | 2610 |
} |
Also available in: Unified diff
Unbreak filter.inc. Pointy-hat ?