summaryrefslogtreecommitdiffstats
path: root/usr/local
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2011-07-28 19:35:03 +0000
committerErmal <eri@pfsense.org>2011-07-28 19:35:03 +0000
commitdfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6 (patch)
treec6256a5e700e299ce3d7235592b41931fc3a8d41 /usr/local
parent5ab25db0794984ea2b0458f557229f75e1dfa1a1 (diff)
downloadpfsense-dfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6.zip
pfsense-dfd9c31d12a1303feab5b6d2ba4b8c5cf67c71f6.tar.gz
Just break states based on the remote host ip and not with localip. The later might be the same as address used by other services and might interrupt them
Diffstat (limited to 'usr/local')
-rwxr-xr-xusr/local/sbin/vpn-linkdown6
1 files changed, 5 insertions, 1 deletions
diff --git a/usr/local/sbin/vpn-linkdown b/usr/local/sbin/vpn-linkdown
index ac9ea2a..4b6cff7 100755
--- a/usr/local/sbin/vpn-linkdown
+++ b/usr/local/sbin/vpn-linkdown
@@ -2,4 +2,8 @@
# record logout
/usr/bin/logger -p local3.info "logout,$1,$4,$5"
-/sbin/pfctl -b $3/32 -b $4/32
+/sbin/pfctl -b 0.0.0.0/32 -b $4/32
+/sbin/pfctl -k $4/32
+/sbin/pfctl -k 0.0.0.0/32 $4/32
+/sbin/pfctl -K $4/32
+/sbin/pfctl -K 0.0.0.0/32 -K $4/32
OpenPOWER on IntegriCloud