From ff091d96117d0e821271ed9b4c5ff6590ff5146f Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Wed, 21 Mar 2007 16:03:42 +0000
Subject: Add an option to disable firewall scrubbing altogether.

---
 usr/local/www/system_advanced.php | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'usr/local/www/system_advanced.php')

diff --git a/usr/local/www/system_advanced.php b/usr/local/www/system_advanced.php
index 4f29e0c..b0d971a 100755
--- a/usr/local/www/system_advanced.php
+++ b/usr/local/www/system_advanced.php
@@ -57,6 +57,7 @@ $pconfig['polling_enable'] = isset($config['system']['polling']);
 $pconfig['bypassstaticroutes'] = isset($config['filter']['bypassstaticroutes']);
 $pconfig['disablenatreflection'] = $config['system']['disablenatreflection'];
 $pconfig['disablechecksumoffloading'] = isset($config['system']['disablechecksumoffloading']);
+$pconfig['disablescrub'] = isset($config['system']['disablescrub']);
 
 if ($_POST) {
 
@@ -203,6 +204,12 @@ if ($_POST) {
 			unset($config['system']['disablechecksumoffloading']);
 		}
 
+		if($_POST['disablescrub'] == "yes") {
+			$config['system']['disablescrub'] = $_POST['disablescrub'];
+		} else {
+			unset($config['system']['disablescrub']);
+		}
+
 		if($_POST['disablenatreflection'] == "yes") {
 			$config['system']['disablenatreflection'] = $_POST['disablenatreflection'];
 		} else {
@@ -532,6 +539,15 @@ include("head.inc");
 			</td>
 		</tr>
 		<tr>
+			<td width="22%" valign="top" class="vncell">Disable Firewall Scrub</td>
+			<td width="78%" class="vtable">
+				<input name="disablescrub" type="checkbox" id="disablescrub" value="yes" <?php if (isset($config['system']['disablescrub'])) echo "checked"; ?> onclick="enable_change(false)" />
+				<strong>Disables the PF scrubbing option which can sometimes interfere with NFS and PPTP traffic.</strong>
+				<br/>
+				Click <a href='http://www.openbsd.org/faq/pf/scrub.html' target='_new'>here</a> for more information.
+			</td>
+		</tr>
+		<tr>
 			<td width="22%" valign="top" class="vncell">Firewall Maximum States</td>
 			<td width="78%" class="vtable">
 				<input name="maximumstates" type="text" id="maximumstates" value="<?php echo $pconfig['maximumstates']; ?>" onclick="enable_change(false)" />
-- 
cgit v1.1