From e7c623c4587572bbebb570770c9cc394523699ef Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@cmb-macbook-pro-3.local>
Date: Sat, 19 Dec 2009 03:45:09 -0500
Subject: match the interface check with the later "pass out" rule's check, so
 as to not generate invalid ruleset

---
 etc/inc/filter.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 08b2e92..9f6533d 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -614,7 +614,7 @@ function filter_generate_optcfg_array()
 		$FilterIflist['pppoe'] = $oic;
 	}
 	/* add ipsec interfaces */
-	if (isset($config['ipsec']['enable'])) {
+	if (isset($config['ipsec']['enable']) || isset($config['ipsec']['mobileclients']['enable'])) {
 		$oic = array();
 		$oic['if'] = 'enc0';
 		$oic['descr'] = 'IPsec';
-- 
cgit v1.1