diff options
| author | Ermal <eri@pfsense.org> | 2011-07-28 19:35:03 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2011-07-28 19:35:03 +0000 |
| commit | dfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6 (patch) | |
| tree | c6256a5e700e299ce3d7235592b41931fc3a8d41 /usr/local/sbin | |
| parent | 5ab25db0794984ea2b0458f557229f75e1dfa1a1 (diff) | |
| download | pfsense-dfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6.zip pfsense-dfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6.tar.gz | |
Just break states based on the remote host ip and not with localip. The later might be the same as address used by other services and might interrupt them
Diffstat (limited to 'usr/local/sbin')
| -rwxr-xr-x | usr/local/sbin/vpn-linkdown | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/usr/local/sbin/vpn-linkdown b/usr/local/sbin/vpn-linkdown index ac9ea2a..4b6cff7 100755 --- a/usr/local/sbin/vpn-linkdown +++ b/usr/local/sbin/vpn-linkdown @@ -2,4 +2,8 @@ # record logout /usr/bin/logger -p local3.info "logout,$1,$4,$5" -/sbin/pfctl -b $3/32 -b $4/32 +/sbin/pfctl -b 0.0.0.0/32 -b $4/32 +/sbin/pfctl -k $4/32 +/sbin/pfctl -k 0.0.0.0/32 $4/32 +/sbin/pfctl -K $4/32 +/sbin/pfctl -K 0.0.0.0/32 -K $4/32 |
