diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-02-23 20:12:57 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-02-23 20:12:57 +0000 |
| commit | 8fe8ab09130dfdc87573b64c35c3c50e8ea992b7 (patch) | |
| tree | 6fe674e1f7237dc0e176a37680020e66c646aa51 | |
| parent | 91604aecf0fc03f82d3435b90ee2783b6d33bd36 (diff) | |
| download | pfsense-packages-8fe8ab09130dfdc87573b64c35c3c50e8ea992b7.tar.gz pfsense-packages-8fe8ab09130dfdc87573b64c35c3c50e8ea992b7.tar.bz2 pfsense-packages-8fe8ab09130dfdc87573b64c35c3c50e8ea992b7.zip | |
Move carp rules to carp_rules.sh (in the package) and use the new package framework.
| -rw-r--r-- | packages/carp_rules.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/packages/carp_rules.php b/packages/carp_rules.php index 918e68ed..c79304cb 100644 --- a/packages/carp_rules.php +++ b/packages/carp_rules.php @@ -38,7 +38,9 @@ foreach($config['installedpackages']['carp']['config'] as $carp) { $ip = $carp['ipaddress']; $int = find_ip_interface($ip); $carp_int = find_carp_interface($ip); - add_rule_to_anchor("carp", "pass out quick on {$carp_int} keep state", $carp_int); + add_rule_to_anchor("carp", "pass out quick on {$carp_int} keep state", $carp_int . "1"); + if($carp['synciface']) + add_rule_to_anchor("carp", "pass on xl0 proto carp from {$carp['synciface']}:network to 224.0.0.18 keep state (no-sync) label \"carp\"", $carp['synciface'] . "2"); if($int <> false && $int <> $wan_interface) { $ipnet = convert_ip_to_network_format($ip, $carp['netmask']); $rule = "nat on {$int} inet from {$ipnet} to any -> ({$carp_int}) \n"; |