diff options
| author | Ermal Luçi <eri@pfsense.org> | 2008-11-28 18:02:23 +0000 |
|---|---|---|
| committer | Ermal Luçi <eri@pfsense.org> | 2008-11-28 18:02:23 +0000 |
| commit | a87c88106ab366f046baf0f459c445a055eea5f9 (patch) | |
| tree | 0438c2a57aafde7a436388197bdb37e04344d61b | |
| parent | a6a79d8e109e60f0057baaa91d96df58937a4a18 (diff) | |
| download | pfsense-a87c88106ab366f046baf0f459c445a055eea5f9.zip pfsense-a87c88106ab366f046baf0f459c445a055eea5f9.tar.gz | |
Limit scrub operation only to in direction as filter rules. For out FreeBSD and pf can handle themselves.(part 2 :)
| -rw-r--r-- | etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 774b146..58234bf 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -264,7 +264,7 @@ function filter_generate_scrubing() else $scrubrnid = ""; if (!isset($config['system']['disablescrub'])) - $scrubrules .= "scrub on \${$scrubcfg['descr']} all {$scrubnodf} {$scrubrnid} {$mssclamp} fragment reassemble\n"; // reassemble all directions + $scrubrules .= "scrub in on \${$scrubcfg['descr']} all {$scrubnodf} {$scrubrnid} {$mssclamp} fragment reassemble\n"; // reassemble all directions else if (!empty($mssclamp)) $scrubrules .= "scrub in on \${$scrubcfg['descr']} {$mssclamp}\n"; } |
