diff --git a/net/pfSense-pkg-frr/files/usr/local/pkg/frr/inc/frr_zebra.inc b/net/pfSense-pkg-frr/files/usr/local/pkg/frr/inc/frr_zebra.inc index ea07597c31bf32173ba5fc518bc0d13adae82f4a..13791f68cab00e246b6af9e85b83e6c850146b40 100644 --- a/net/pfSense-pkg-frr/files/usr/local/pkg/frr/inc/frr_zebra.inc +++ b/net/pfSense-pkg-frr/files/usr/local/pkg/frr/inc/frr_zebra.inc @@ -698,6 +698,7 @@ function frr_zebra_generate_staticroutes() { /* Generate a convenience list of accept filters */ function frr_zebra_generate_acceptfilters() { global $config, $frr_config_base; + $seq = 10; /* Check OSPF Interfaces for automatic accept filters */ if (is_array($config['installedpackages']['frrospfdinterfaces']['config'])) { @@ -708,15 +709,16 @@ function frr_zebra_generate_acceptfilters() { } if (!empty($conf['acceptfilter']) && is_ipaddrv4($subnet) && is_numericint($interface_subnet)) { $noaccept = $noaccept ?: ""; - $noaccept .= "ip prefix-list ACCEPTFILTER deny {$subnet}/{$interface_subnet}\n"; - $noaccept .= "ip prefix-list ACCEPTFILTER deny {$interface_ip}/32\n"; + $noaccept .= "ip prefix-list ACCEPTFILTER seq {$seq} deny {$subnet}/{$interface_subnet}\n"; + $seq += 10; + $noaccept .= "ip prefix-list ACCEPTFILTER seq {$seq} deny {$interface_ip}/32\n"; + $seq += 10; } } } /* Check FRR configuration network list for accept filter entries */ if (is_array($config['installedpackages']['frr']['config'][0]['row'])) { - $seq = 10; foreach ($config['installedpackages']['frr']['config'][0]['row'] as $redistr) { if (isset($redistr['acceptfilter'])) { $noaccept = $noaccept ?: "";