diff options
author | Chris Buechler <cmb@pfsense.org> | 2013-03-22 21:14:54 -0700 |
---|---|---|
committer | Chris Buechler <cmb@pfsense.org> | 2013-03-22 21:14:54 -0700 |
commit | e9360d27f92fd405cb95d0d89c8d57e479e39421 (patch) | |
tree | 83ef97a7b317a973af87b40a3220fef94f42fe8a /config | |
parent | 5c31da979d885727448f8009748fc60a751f974d (diff) | |
parent | 6e92c34f5c39d7af5fcd90b0e274ddf71a0083ce (diff) | |
download | pfsense-packages-e9360d27f92fd405cb95d0d89c8d57e479e39421.tar.gz pfsense-packages-e9360d27f92fd405cb95d0d89c8d57e479e39421.tar.bz2 pfsense-packages-e9360d27f92fd405cb95d0d89c8d57e479e39421.zip |
Merge pull request #412 from bmeeks8/master
Fix logic bug in preproc auto-rule-disable so it skips already disabled rules
Diffstat (limited to 'config')
-rwxr-xr-x | config/snort/snort.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/config/snort/snort.inc b/config/snort/snort.inc index 6af50ffe..27d0b7e5 100755 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -1855,7 +1855,8 @@ function snort_filter_preproc_rules($snortcfg, &$active_rules) { ***************************************************/ foreach ($active_rules as $k1 => $rulem) { foreach ($rulem as $k2 => $v) { - if ($v['disabled'] == 0) + /* If rule is already disabled, skip it. */ + if ($v['disabled'] == 1) continue; foreach ($rule_opts_preprocs as $opt => $preproc) { $pcre = "/\s*\b" . $opt . "/i"; |