diff --git a/src/opnsense/service/templates/OPNsense/IPFW/ipfw.conf b/src/opnsense/service/templates/OPNsense/IPFW/ipfw.conf index 8432a3c3e..913a1e277 100644 --- a/src/opnsense/service/templates/OPNsense/IPFW/ipfw.conf +++ b/src/opnsense/service/templates/OPNsense/IPFW/ipfw.conf @@ -111,6 +111,19 @@ add {{loop.index + 1000}} skipto 60000 icmp from any to { 255.255.255.255 or {{ {% endif %} {% endfor %} +#====================================================================================== +# Allow traffic to this hosts VIPs +#====================================================================================== +{% for item in virtualip.vip %} +{% if ':' not in item.subnet %} +add {{loop.index + 2000}} skipto 60000 udp from any to {{ item.subnet }} dst-port 53 keep-state +add {{loop.index + 2000}} skipto 60000 ip from any to { 255.255.255.255 or {{item.subnet}} } in +add {{loop.index + 2000}} skipto 60000 ip from { 255.255.255.255 or {{item.subnet}} } to any out +add {{loop.index + 2000}} skipto 60000 icmp from { 255.255.255.255 or {{item.subnet}} } to any out icmptypes 0 +add {{loop.index + 2000}} skipto 60000 icmp from any to { 255.255.255.255 or {{item.subnet}} } in icmptypes 8 +{% endif %} +{% endfor %} + {% for item in cp_interface_list %} #=================================================================================== # zone {{item.zone}} ({{item.zoneid}}) / {{item.if}} configuration