Commit e19f6285 authored by Ad Schellevis's avatar Ad Schellevis

(filter) skip anti lockout wan rule when only lan is connected

parent aa0bee2f
...@@ -3181,7 +3181,7 @@ EOD; ...@@ -3181,7 +3181,7 @@ EOD;
pass in {$log['pass']} quick on {$lanif} proto tcp from any to ({$lanif}) port { {$alports} } keep state label "anti-lockout rule" pass in {$log['pass']} quick on {$lanif} proto tcp from any to ({$lanif}) port { {$alports} } keep state label "anti-lockout rule"
EOD; EOD;
} else if (count($config['interfaces']) == 1) { } elseif (count($config['interfaces']) == 1 && !empty($FilterIflist['wan']['if'])) {
/* single-interface deployment, add to WAN */ /* single-interface deployment, add to WAN */
$wanif = $FilterIflist["wan"]['if']; $wanif = $FilterIflist["wan"]['if'];
$ipfrules .= <<<EOD $ipfrules .= <<<EOD
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment