diff options
| author | Chris Buechler <cmb@pfsense.org> | 2015-03-26 16:46:41 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2015-03-26 16:47:32 -0500 |
| commit | 62dc93d16624a93956eed0e1cfe261cf02354670 (patch) | |
| tree | b4ef1b714c7af439bd437b67aa20b9b038681149 /etc/inc/globals.inc | |
| parent | 8f20b01661284b229601a17a01440bc4f3ce95d5 (diff) | |
| download | pfsense-62dc93d16624a93956eed0e1cfe261cf02354670.zip pfsense-62dc93d16624a93956eed0e1cfe261cf02354670.tar.gz | |
Include net.key.preferred_oldsa in the sysctl list, set to 0 (disable) so
it doesn't fall through to the default (1).
Diffstat (limited to 'etc/inc/globals.inc')
| -rw-r--r-- | etc/inc/globals.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/globals.inc b/etc/inc/globals.inc index caf06ae..ca1439c 100644 --- a/etc/inc/globals.inc +++ b/etc/inc/globals.inc @@ -166,6 +166,7 @@ $sysctls = array("net.inet.ip.portrange.first" => "1024", "net.enc.out.ipsec_filter_mask" => "0x0001", "net.enc.in.ipsec_bpf_mask" => "0x0002", "net.enc.in.ipsec_filter_mask" => "0x0002", + "net.key.preferred_oldsa" => "0", "net.inet.carp.senderr_demotion_factor" => 0, /* Do not demote CARP for interface send errors */ "net.pfsync.carp_demotion_factor" => 0 /* Do not demote CARP for pfsync errors */ ); |
