From eb9c969adc1974ce0219f51b58eae6aede388be3 Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Fri, 11 Mar 2005 16:55:05 +0000 Subject: Allow pfsync0 to talk. --- packages/carp_rules.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/packages/carp_rules.php b/packages/carp_rules.php index 20fd5988..7ae0e893 100644 --- a/packages/carp_rules.php +++ b/packages/carp_rules.php @@ -28,14 +28,17 @@ */ /* return if there are no carp configured items */ -if($config['installedpackages']['carp']['config']) return; +//if($config['installedpackages']['carp']['config']) return; + mwexec("/sbin/pfctl -a carp -Fr"); + /* carp records exist, lets process */ $wan_interface = get_real_wan_interface(); foreach($config['installedpackages']['carp']['config'] as $carp) { $ip = $carp['ipaddress']; $int = find_ip_interface($ip); $carp_int = find_carp_interface($ip); + $carp_sync_int = convert_friendly_interface_to_real_interface_name($carp['pfsyncinterface']); add_rule_to_anchor("carp", "pass out quick on {$carp_int} keep state", $carp_int . "1"); if($int <> false and $int <> $wan_interface) { $ipnet = convert_ip_to_network_format($ip, $carp['netmask']); @@ -43,10 +46,9 @@ foreach($config['installedpackages']['carp']['config'] as $carp) { add_rule_to_anchor("natrules", $rule, $ip); } } -$carp_sync_int = convert_friendly_interface_to_real_interface_name($config['installedpackages']['carpsettings']['config']['pfsyncinterface']); +add_rule_to_anchor("carp", "pass quick on pfsync0", "pfsync0" . "3"); if($carp_sync_int <> "") { add_rule_to_anchor("carp", "pass quick on {$carp_sync_int}", $carp_sync_int . "3"); - add_rule_to_anchor("carp", "pass quick on pfsync0", "pfsync0" . "3"); add_rule_to_anchor("carp", "pass quick on {$carp_sync_int} proto carp from {$carp_sync_int}:network to 224.0.0.18 keep state \(no-sync\)", $carp_sync_int . "2"); } -- cgit v1.2.3