freebsd-ports/security/fwbuilder/files/patch-src-pflib-PolicyCompiler_pf.cpp
Cy Schubert 87b82e965d Incorporate a fix for fwbuilder commit #2844561 which introduced a bug
when generating IP Filter statements for bi-directional filtering.
2009-10-27 20:12:54 +00:00

24 lines
1.2 KiB
C++

diff -urPN --exclude=CVS --exclude=.svn --exclude=00_TRANS.TBL export/home/cy/freebsd/fwbuilder/work/fwbuilder-3.0.7/src/pflib/PolicyCompiler_pf.cpp usr/ports/security/fwbuilder.old/work/fwbuilder-3.0.6/src/pflib/PolicyCompiler_pf.cpp
--- src/pflib/PolicyCompiler_pf.cpp 2009-09-18 12:28:39.000000000 -0700
+++ src/pflib/PolicyCompiler_pf.cpp 2009-08-18 08:27:52.000000000 -0700
@@ -521,8 +521,7 @@
{
PolicyRule *rule=getNext(); if (rule==NULL) return false;
- if (rule->getDirection()==PolicyRule::Both &&
- rule->getAction()==PolicyRule::Route)
+ if (rule->getDirection()==PolicyRule::Both)
{
PolicyRule *r= compiler->dbcopy->createPolicyRule();
compiler->temp_ruleset->add(r);
@@ -1080,9 +1079,7 @@
add( new fillDirection("determine directions" ));
// commented out for bug #2828602
-// ... and put back per #2844561
-// both bug reports/patches are by Tom Judge (tomjudge on sourceforge)
- add( new SplitDirection("split rules with direction 'both'" ));
+// add( new SplitDirection("split rules with direction 'both'" ));
add( new addLoopbackForRedirect(
"add loopback to rules that permit redirected services" ) );