Merge pull request #1149 from opnsense/frr_add_output_rule

net/frr: add outbound rules
This commit is contained in:
Fabian Franz BSc
2019-01-25 20:06:18 +01:00
committed by GitHub
2 changed files with 35 additions and 3 deletions
+1 -1
View File
@@ -1,5 +1,5 @@
PLUGIN_NAME= frr
PLUGIN_VERSION= 1.6
PLUGIN_VERSION= 1.7
PLUGIN_COMMENT= The FRRouting Protocol Suite
PLUGIN_DEPENDS= frr5 ruby
PLUGIN_CONFLICTS= quagga
+34 -2
View File
@@ -55,7 +55,7 @@ function frr_firewall($fw)
'statetype' => 'keep',
'label' => 'Pass OSPF (autogenerated)',
'from' => $network->ipaddr . '/' . $network->netmask,
'to' => '224.0.0.0/4',
'to' => '224.0.0.0/24',
'direction' => 'in',
'type' => 'pass',
'disablereplyto' => 1,
@@ -64,7 +64,7 @@ function frr_firewall($fw)
null
);
$fw->registerFilterRule(
1, /* priority */
1,
array(
'ipprotocol' => 'inet',
'protocol' => 'ospf',
@@ -79,6 +79,38 @@ function frr_firewall($fw)
),
null
);
$fw->registerFilterRule(
1,
array(
'ipprotocol' => 'inet',
'protocol' => 'ospf',
'statetype' => 'keep',
'label' => 'Pass OSPF (autogenerated)',
'from' => '224.0.0.0/24',
'to' => $network->ipaddr . '/' . $network->netmask,
'direction' => 'out',
'type' => 'pass',
'disablereplyto' => 1,
'quick' => true
),
null
);
$fw->registerFilterRule(
1,
array(
'ipprotocol' => 'inet',
'protocol' => 'ospf',
'statetype' => 'keep',
'label' => 'Pass OSPF UNICAST (autogenerated)',
'from' => '(self)',
'to' => $network->ipaddr . '/' . $network->netmask,
'direction' => 'out',
'type' => 'pass',
'disablereplyto' => 1,
'quick' => true
),
null
);
}
}
}