mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow tcpdump by default on enc. There is no measurable performance impact, and it's annoying to flip the sysctls to allow when needed.

Browse Source
This commit is contained in:
Chris Buechler 2009-08-08 18:59:22 -04:00
parent 1213235ce2
commit ace6d864a3
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/inc/vpn.inc
View File

@ -100,9 +100,9 @@ function vpn_ipsec_configure($ipchg = false) {
mwexec("/sbin/ifconfig enc0 create", true);
mwexec("/sbin/ifconfig enc0 up", true);
exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x00000000");
exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x00000001");
exec("/sbin/sysctl net.enc.out.ipsec_filter_mask=0x00000001");
exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x00000000");
exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x00000002");
exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x00000002");
/* get the automatic /etc/ping_hosts.sh ready */