Add a pass out rule for each carp interface. Use updated add_rule_to_anchor by passing a label too.

1 files changed, 2 insertions, 1 deletions

diff --git a/packages/carp_rules.php b/packages/carp_rules.php
index d3ace240..33256bed 100644
--- a/packages/carp_rules.php
+++ b/packages/carp_rules.php
@@ -36,10 +36,11 @@ foreach($config['installedpackages']['carp']['config'] as $carp) {
     $ip = $carp['ipaddress'];
     $int = find_ip_interface($ip);
     $carp_int = find_carp_interface($ip);
+    add_rule_to_anchor("firewallout", "pass out quick on {$carp_int} keep state", $carp_int)
     if($int <> false && $int <> $wan_interface) {
 	$ipnet = convert_ip_to_network_format($ip, $carp['netmask']);
 	$rule = "nat on {$int} inet from {$ipnet} to any -> ({$carp_int}) \n";
-	add_rule_to_anchor("natrules", $rule);
+	add_rule_to_anchor("natrules", $rule, $ip);
     }
 }