Project

General

Profile

« Previous | Next » 

Revision e0f338eb

Added by Ermal LUÇI over 12 years ago

Ticket #2636 Seems ipsec apart IP-IP does not have any after processing for input packets. Make the filter apropriately so the packets are passed correctly through BPF and pfil(9)

View differences:

etc/inc/system.inc
67 67 
		return;
68 68 
	exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x0001");
69 69 
	exec("/sbin/sysctl net.enc.out.ipsec_filter_mask=0x0001");
70 
	exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x0002");
71 
	exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x0002");
70 
	exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x0001");
71 
	exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x0001");
72 72 

  		




  73
  73
  
    
	if(is_array($config['sysctl'])) {


  		




  74
  74
  
    
		foreach($config['sysctl']['item'] as $tunable) {


  		












Also available in:  Unified diff