mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
Do not generate antispoof for virtual interfaces.
This commit is contained in:
parent
2f69e11c5e
commit
97b8e3fc89
@ -435,6 +435,7 @@ function generate_optcfg_array()
|
||||
$oic['alias-address'] = $oc['alias-address'];
|
||||
$oic['alias-subnet'] = $oc['alias-subnet'];
|
||||
$oic['gateway'] = $oc['gateway'];
|
||||
$oic['spoofcheck'] = "yes";
|
||||
|
||||
$FilterIflist[$if] = $oic;
|
||||
}
|
||||
@ -2104,8 +2105,8 @@ EOD;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']))
|
||||
$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
|
||||
if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']) && isset($oc['spoofcheck']))
|
||||
$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
|
||||
|
||||
|
||||
/* block private networks ? */
|
||||
|
||||
Loading…
Reference in New Issue
Block a user