Limit scrub operation only to in direction as filter rules. For out FreeBSD and pf can handle themselves.

This commit is contained in:
Ermal Luçi 2008-11-28 18:01:32 +00:00
parent 3af4a901f8
commit a6a79d8e10

View File

@ -266,7 +266,7 @@ function filter_generate_scrubing()
if (!isset($config['system']['disablescrub']))
$scrubrules .= "scrub on \${$scrubcfg['descr']} all {$scrubnodf} {$scrubrnid} {$mssclamp} fragment reassemble\n"; // reassemble all directions
else if (!empty($mssclamp))
$scrubrules .= "scrub on \${$scrubcfg['descr']} {$mssclamp}\n";
$scrubrules .= "scrub in on \${$scrubcfg['descr']} {$mssclamp}\n";
}
return $scrubrules;
}