From ace6d864a3ff47fa4e29394d8cb6c714dde594cb Mon Sep 17 00:00:00 2001 From: Chris Buechler Date: Sat, 8 Aug 2009 18:59:22 -0400 Subject: [PATCH] Allow tcpdump by default on enc. There is no measurable performance impact, and it's annoying to flip the sysctls to allow when needed. --- etc/inc/vpn.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 2a5feb3420..615a2dff68 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -100,9 +100,9 @@ function vpn_ipsec_configure($ipchg = false) { mwexec("/sbin/ifconfig enc0 create", true); mwexec("/sbin/ifconfig enc0 up", true); - exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x00000000"); + exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x00000001"); exec("/sbin/sysctl net.enc.out.ipsec_filter_mask=0x00000001"); - exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x00000000"); + exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x00000002"); exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x00000002"); /* get the automatic /etc/ping_hosts.sh ready */