diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-01-11 00:49:13 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-01-11 00:49:13 +0000 |
| commit | 4cbcdf911520f3ea7ac42b69cd270caaea83c678 (patch) | |
| tree | bfc09e3ec1888d9606eff4741faff15ce938eb5b /etc/inc/vpn.inc | |
| parent | f55cccc4a42a77c8a36205815a932f5c7adf23cc (diff) | |
| download | pfsense-4cbcdf911520f3ea7ac42b69cd270caaea83c678.zip pfsense-4cbcdf911520f3ea7ac42b69cd270caaea83c678.tar.gz | |
fastforwarding is not compatible with ipsec tunnels -- turn it off if the user has ipsec tunnels.
Diffstat (limited to 'etc/inc/vpn.inc')
| -rw-r--r-- | etc/inc/vpn.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index f90de3f..20408db 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -94,6 +94,9 @@ function vpn_ipsec_configure($ipchg = false) { if (isset($ipseccfg['enable'])) { + /* fastforwarding is not compatible with ipsec tunnels */ + sysctl("sysctl net.inet.ip.fastforwarding=0"); + if (!$curwanip) { /* IP address not configured yet, exit */ if ($g['booting']) |
