mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Make carp rules a little tighter and don't sync to peer (peer will already have same state)

Browse Source
This commit is contained in:
Bill Marquette 2005-02-20 17:55:16 +00:00
parent f883f1dd69
commit e397ee623e
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/inc/filter.inc
View File

@ -931,8 +931,8 @@ function filter_rules_generate() {
/* if carp is defined, lets pass the traffic */
if(is_carp_defined() == true) {
$ipfrules .= "pass on " . $lanif . " proto carp keep state label \"carp\"\n";
$ipfrules .= "pass on " . $wanif . " proto carp keep state label \"carp\"\n";
$ipfrules .= "pass on " . $lanif . " proto carp from $lanif:network to 224.0.0.18 keep state (no-sync) label \"carp\"\n";
$ipfrules .= "pass on " . $wanif . " proto carp from $wanif:network to 224.0.0.18 keep state (no-sync) label \"carp\"\n";
}
/* if squid is installed, lets install its rule */