Skip to content

Commit

Permalink
firewall: wrong reply"-to" for previous
Browse files Browse the repository at this point in the history
  • Loading branch information
fichtner committed Aug 1, 2022
1 parent eebc167 commit fe52702
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/opnsense/mvc/app/library/OPNsense/Firewall/Rule.php
Original file line number Diff line number Diff line change
Expand Up @@ -256,7 +256,7 @@ protected function convertAddress(&$rule)
} elseif (!empty($interfaces[$network_name]['if'])) {
$rule[$target] = "({$interfaces[$network_name]['if']}:network)";
if ($rule['ipprotocol'] == 'inet6' && $rule['interface'] == $network_name) {
if ($this instanceof FilterRule && empty($rule['gateway']) && empty($rule['reply'])) {
if ($this instanceof FilterRule && empty($rule['gateway']) && empty($rule['reply-to'])) {
/* historically pf(4) excludes link-local on :network to avoid anti-spoof overlap */
$rule[$target] .= ',fe80::/10';
}
Expand Down

0 comments on commit fe52702

Please sign in to comment.