aboutsummaryrefslogtreecommitdiffstats
path: root/packages
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2005-03-11 17:38:57 +0000
committerScott Ullrich <sullrich@pfsense.org>2005-03-11 17:38:57 +0000
commitb099535f42b277d65b9b0cfa33b86228a4a85b3d (patch)
treed4ada81536911885c167df5ed951da93efd42e25 /packages
parenteb9c969adc1974ce0219f51b58eae6aede388be3 (diff)
downloadpfsense-packages-b099535f42b277d65b9b0cfa33b86228a4a85b3d.tar.gz
pfsense-packages-b099535f42b277d65b9b0cfa33b86228a4a85b3d.tar.bz2
pfsense-packages-b099535f42b277d65b9b0cfa33b86228a4a85b3d.zip
Keep state on carp.
Diffstat (limited to 'packages')
-rw-r--r--packages/carp_rules.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/packages/carp_rules.php b/packages/carp_rules.php
index 7ae0e893..67bb4ba9 100644
--- a/packages/carp_rules.php
+++ b/packages/carp_rules.php
@@ -38,8 +38,8 @@ foreach($config['installedpackages']['carp']['config'] as $carp) {
$ip = $carp['ipaddress'];
$int = find_ip_interface($ip);
$carp_int = find_carp_interface($ip);
- $carp_sync_int = convert_friendly_interface_to_real_interface_name($carp['pfsyncinterface']);
add_rule_to_anchor("carp", "pass out quick on {$carp_int} keep state", $carp_int . "1");
+ add_rule_to_anchor("carp", "pass quick on {$carp_int} proto carp keep state", $carp_int . "41");
if($int <> false and $int <> $wan_interface) {
$ipnet = convert_ip_to_network_format($ip, $carp['netmask']);
$rule = "nat on {$int} inet from {$ipnet} to any -> ({$carp_int}) \n";
@@ -47,6 +47,8 @@ foreach($config['installedpackages']['carp']['config'] as $carp) {
}
}
add_rule_to_anchor("carp", "pass quick on pfsync0", "pfsync0" . "3");
+foreach($config['installedpackages']['carpsettings']['config'] as $carp)
+$carp_sync_int = convert_friendly_interface_to_real_interface_name($carp['pfsyncinterface']);
if($carp_sync_int <> "") {
add_rule_to_anchor("carp", "pass quick on {$carp_sync_int}", $carp_sync_int . "3");
add_rule_to_anchor("carp", "pass quick on {$carp_sync_int} proto carp from {$carp_sync_int}:network to 224.0.0.18 keep state \(no-sync\)", $carp_sync_int . "2");