Revision 318ef83f
Added by Scott Ullrich almost 20 years ago
| etc/inc/filter.inc | ||
|---|---|---|
| 1630 | 1630 |
$ipfrules .= "pass quick on {$wanif} proto ah from {$ipsec_ip} to {$remote_gateway} keep state label \"IPSEC: {$tunnel['descr']} - outbound ah proto\"\n";
|
| 1631 | 1631 |
$ipfrules .= "pass quick on {$wanif} proto ah from {$remote_gateway} to {$ipsec_ip} keep state label \"IPSEC: {$tunnel['descr']} - inbound ah proto\"\n";
|
| 1632 | 1632 |
|
| 1633 |
$ipfrules .= "pass quick on {$lanif} from {$tunnel['remote-subnet']} to {$local_subnet} keep state label \"IPSEC: {$tunnel['descr']} - remote subnet to local subnet\"\n";
|
|
| 1634 |
$ipfrules .= "pass quick on {$lanif} from {$local_subnet} to {$tunnel['remote-subnet']} keep state label \"IPSEC: {$tunnel['descr']} - local subnet to remote subnet\"\n";
|
|
| 1633 |
$ipfrules .= "pass quick on {$lanif} from {$tunnel['remote-subnet']} to {$local_subnet} keep state label \"IPSEC: {$tunnel['descr']} - remote to local\"\n";
|
|
| 1634 |
$ipfrules .= "pass quick on {$lanif} from {$local_subnet} to {$tunnel['remote-subnet']} keep state label \"IPSEC: {$tunnel['descr']} - local to remote\"\n";
|
|
| 1635 | 1635 |
} |
| 1636 | 1636 |
} |
| 1637 | 1637 |
|
Also available in: Unified diff
Trim the label. It sucks to get label too long errors after an upgrade!