diff options
| author | Ermal <eri@pfsense.org> | 2013-02-06 22:23:16 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2013-02-06 22:23:16 +0000 |
| commit | 94395d8672f48b96528684cb9f98f082c8c52875 (patch) | |
| tree | 7b77c1ca1b192caefd21a69605bebf912e8d0a39 /etc | |
| parent | d6e569ae4f8ce5ccff19f5097e35de38405aa481 (diff) | |
| download | pfsense-94395d8672f48b96528684cb9f98f082c8c52875.zip pfsense-94395d8672f48b96528684cb9f98f082c8c52875.tar.gz | |
Need to rethink this again
Revert "Ticket #2636 Seems ipsec apart IP-IP does not have any after processing for input packets. Make the filter apropriately so the packets are passed correctly through BPF and pfil(9)"
This reverts commit e0f338eb1b02d7bf4920d4682404412e98a3075c.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/system.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index 351ae2c..dfd29bc 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -67,8 +67,8 @@ function activate_sysctls() { return; exec("/sbin/sysctl net.enc.out.ipsec_bpf_mask=0x0001"); exec("/sbin/sysctl net.enc.out.ipsec_filter_mask=0x0001"); - exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x0001"); - exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x0001"); + exec("/sbin/sysctl net.enc.in.ipsec_bpf_mask=0x0002"); + exec("/sbin/sysctl net.enc.in.ipsec_filter_mask=0x0002"); if(is_array($config['sysctl'])) { foreach($config['sysctl']['item'] as $tunable) { |
