From 9a12451b3a77fc6d68c1e970c083deeb3e653c67 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ermal=20Lu=C3=A7i?= Date: Sun, 19 Oct 2008 07:50:51 +0000 Subject: [PATCH] Do not try to generate rules for the known interface groups or should we? --- etc/inc/filter.inc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 611eab3a2f..8be4cf0d3a 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -282,6 +282,8 @@ function filter_generate_scrubing() /* disable scrub option */ foreach ($FilterIflist as $scrubif => $scrubcfg) { + if (in_array($scrubif, array("pppoe", "pptp", "enc0", "openvpn" /*, "lt2p", "ppp" */))) + continue; /* set up MSS clamping */ if ($scrubcfg['mtu'] <> "" and is_numeric($scrubcfg['mtu'])) $mssclamp = "max-mss " . (intval($scrubcfg['mtu'] - 40)); @@ -2892,4 +2894,4 @@ function return_vpn_subnet($adr) } -?> \ No newline at end of file +?>