Do not generate antispoof for virtual interfaces.

This commit is contained in:
Ermal Luçi 2008-08-01 21:09:49 +00:00
parent 2f69e11c5e
commit 97b8e3fc89

View File

@ -435,6 +435,7 @@ function generate_optcfg_array()
$oic['alias-address'] = $oc['alias-address'];
$oic['alias-subnet'] = $oc['alias-subnet'];
$oic['gateway'] = $oc['gateway'];
$oic['spoofcheck'] = "yes";
$FilterIflist[$if] = $oic;
}
@ -2104,8 +2105,8 @@ EOD;
break;
}
}
if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']))
$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']) && isset($oc['spoofcheck']))
$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
/* block private networks ? */