From 97b8e3fc89e25a3bebe0884fc01f37b38da9fe2c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ermal=20Lu=C3=A7i?= <eri@pfsense.org>
Date: Fri, 1 Aug 2008 21:09:49 +0000
Subject: [PATCH] Do not generate antispoof for virtual interfaces.

---
 etc/inc/filter.inc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index b778a21964..2b57578bb9 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -435,6 +435,7 @@ function generate_optcfg_array()
 		$oic['alias-address'] = $oc['alias-address'];
 		$oic['alias-subnet'] = $oc['alias-subnet'];
 		$oic['gateway'] = $oc['gateway'];
+		$oic['spoofcheck'] = "yes";
 
 		$FilterIflist[$if] = $oic;
 	}
@@ -2104,8 +2105,8 @@ EOD;
 				break;
 			}
 		}
-		if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']))
-			$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
+		if ($oc['ip'] && !($isbridged) && !isset($config['bridge']['filteringbridge']) && isset($oc['spoofcheck']))
+				$ipfrules .= filter_rules_spoofcheck_generate($on, $oc['if'], $oc['sa'], $oc['sn'], $log);
 
 
 		/* block private networks ? */