diff options
author | Chris Buechler <cmb@pfsense.org> | 2015-11-12 03:49:18 -0600 |
---|---|---|
committer | Chris Buechler <cmb@pfsense.org> | 2015-11-12 03:50:03 -0600 |
commit | 8e068605629b3da9630abe801d263dec60405ecf (patch) | |
tree | 52c428c8b642c201a211fa26801c534dea542c9b /src/etc | |
parent | bc7715147d4bf76acd78dd7b1815d0979a51c48b (diff) | |
download | pfsense-8e068605629b3da9630abe801d263dec60405ecf.zip pfsense-8e068605629b3da9630abe801d263dec60405ecf.tar.gz |
The net.enc.in sysctls should be 2, for only the inner portion of the VPN. Ticket #5421
Diffstat (limited to 'src/etc')
-rw-r--r-- | src/etc/inc/globals.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/etc/inc/globals.inc b/src/etc/inc/globals.inc index ccaf61c..e1aab12 100644 --- a/src/etc/inc/globals.inc +++ b/src/etc/inc/globals.inc @@ -156,8 +156,8 @@ $sysctls = array("net.inet.ip.portrange.first" => "1024", "net.inet6.ip6.rfc6204w3" => 1, "net.enc.out.ipsec_bpf_mask" => "0x0001", "net.enc.out.ipsec_filter_mask" => "0x0001", - "net.enc.in.ipsec_bpf_mask" => "0x0003", - "net.enc.in.ipsec_filter_mask" => "0x0003", + "net.enc.in.ipsec_bpf_mask" => "0x0002", + "net.enc.in.ipsec_filter_mask" => "0x0002", "net.key.preferred_oldsa" => "0", "net.inet.carp.senderr_demotion_factor" => 0, /* Do not demote CARP for interface send errors */ "net.pfsync.carp_demotion_factor" => 0 /* Do not demote CARP for pfsync errors */ |