diff options
| author | Ermal <eri@pfsense.org> | 2012-11-22 16:43:47 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2012-11-22 16:43:47 +0000 |
| commit | 3a4b01476620d33b6d6200849231398f82e593c7 (patch) | |
| tree | d4369e73df57bf65a21063de86af694fee376f43 /etc/inc/filter.inc | |
| parent | af13aad69fd8127bc505f36b7debc00aadc9320c (diff) | |
| download | pfsense-3a4b01476620d33b6d6200849231398f82e593c7.zip pfsense-3a4b01476620d33b6d6200849231398f82e593c7.tar.gz | |
Resolves #2529. Load the ipfw module before any commands are executed on CP. Also move the filter_load_ipfw() to captiveportal.inc:captiveportal_load_modules() since no other place uses ipfw(4)
Diffstat (limited to 'etc/inc/filter.inc')
| -rw-r--r-- | etc/inc/filter.inc | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 09d689c..bfd5b17 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -83,31 +83,6 @@ function flowtable_configure() { } } -function filter_load_ipfw() { - global $config; - - if(!is_module_loaded("ipfw.ko")) { - mute_kernel_msgs(); - mwexec("/sbin/kldload ipfw"); - unmute_kernel_msgs(); - /* - * make sure ipfw is the first hook to make CP and schedules work - * correctly on Multi-WAN. - */ - mwexec("/sbin/sysctl net.inet.ip.pfil.inbound=\"pf\" net.inet6.ip6.pfil.inbound=\"pf\"" . - " net.inet.ip.pfil.outbound=\"pf\" net.inet6.ip6.pfil.outbound=\"pf\""); - } - - /* XXX: This are not used in pfSense, keep?! Set ipfw state limit */ - if($config['system']['maximumstates'] <> "" && is_numeric($config['system']['maximumstates'])) { - /* Set ipfw states to user defined maximum states in Advanced menu. */ - mwexec("sysctl net.inet.ip.fw.dyn_max={$config['system']['maximumstates']}"); - } else { - /* Set to default 10,000 */ - mwexec("sysctl net.inet.ip.fw.dyn_max=10000"); - } -} - function filter_pflog_start($kill_first = false) { global $config, $g; if ($g['platform'] == 'jail') |
