Firewall: Automation: Filter - add allowopts for #8143

opnsense · Dec 24, 2024 · e6440cb · e6440cb
1 parent 0d9550b
commit e6440cb
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml b/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
@@ -55,6 +55,13 @@
             When a rule does not have quick enabled, the last matching rule wins.
         </help>
     </field>
+    <field>
+        <id>rule.allowopts</id>
+        <label>Allow options</label>
+        <type>checkbox</type>
+        <help>This allows packets with IP options to pass. Otherwise they are blocked by default.</help>
+        <advanced>true</advanced>
+    </field>
     <field>
         <id>rule.interfacenot</id>
         <label>Interface / Invert</label>

diff --git a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
@@ -131,6 +131,10 @@
                     <Default>0</Default>
                     <Required>Y</Required>
                 </log>
+                <allowopts type="BooleanField">
+                    <Default>0</Default>
+                    <Required>Y</Required>
+                </allowopts>
                 <nosync type="BooleanField">
                     <Default>0</Default>
                     <Required>Y</Required>