diff options
author | Emmanuel Vadot <manu@FreeBSD.org> | 2017-07-18 14:02:02 +0000 |
---|---|---|
committer | Emmanuel Vadot <manu@FreeBSD.org> | 2017-07-18 14:02:02 +0000 |
commit | 2a4727a472e47a1ef5a9392284abd20657156e2f (patch) | |
tree | d74efbce27e507e642ad56b0fd55b9fbfde6928e /etc/rc.d | |
parent | 37ec52ca7a2ab8c90a11271c286261a92707ed82 (diff) | |
download | src-2a4727a472e47a1ef5a9392284abd20657156e2f.tar.gz src-2a4727a472e47a1ef5a9392284abd20657156e2f.zip |
ipfw_netflow: Add support for FIB
If ipfw_netflow_fib, the ipfw rule will only match packets in that FIB.
While here correct some value in rc.conf(5) to be int and not str.
Sponsored by: Gandi.net
Notes
Notes:
svn path=/head/; revision=321128
Diffstat (limited to 'etc/rc.d')
-rwxr-xr-x | etc/rc.d/ipfw_netflow | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/rc.d/ipfw_netflow b/etc/rc.d/ipfw_netflow index 9ef14997e954..b9523db9eb5a 100755 --- a/etc/rc.d/ipfw_netflow +++ b/etc/rc.d/ipfw_netflow @@ -54,7 +54,7 @@ ipfw_netflow_status() ipfw_netflow_start() { ipfw_netflow_is_running && err 1 "ipfw_netflow is already active" - ipfw add ${ipfw_netflow_rule} ngtee ${ipfw_netflow_hook} ip from any to any + ipfw add ${ipfw_netflow_rule} ngtee ${ipfw_netflow_hook} ip from any to any ${ipfw_netflow_fib:+fib ${ipfw_netflow_fib}} ngctl -f - <<-EOF mkpeer ipfw: netflow ${ipfw_netflow_hook} iface0 name ipfw:${ipfw_netflow_hook} netflow |