aboutsummaryrefslogtreecommitdiff
path: root/etc/rc.d
diff options
context:
space:
mode:
authorEmmanuel Vadot <manu@FreeBSD.org>2017-07-18 14:02:02 +0000
committerEmmanuel Vadot <manu@FreeBSD.org>2017-07-18 14:02:02 +0000
commit2a4727a472e47a1ef5a9392284abd20657156e2f (patch)
treed74efbce27e507e642ad56b0fd55b9fbfde6928e /etc/rc.d
parent37ec52ca7a2ab8c90a11271c286261a92707ed82 (diff)
downloadsrc-2a4727a472e47a1ef5a9392284abd20657156e2f.tar.gz
src-2a4727a472e47a1ef5a9392284abd20657156e2f.zip
ipfw_netflow: Add support for FIB
If ipfw_netflow_fib, the ipfw rule will only match packets in that FIB. While here correct some value in rc.conf(5) to be int and not str. Sponsored by: Gandi.net
Notes
Notes: svn path=/head/; revision=321128
Diffstat (limited to 'etc/rc.d')
-rwxr-xr-xetc/rc.d/ipfw_netflow2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/rc.d/ipfw_netflow b/etc/rc.d/ipfw_netflow
index 9ef14997e954..b9523db9eb5a 100755
--- a/etc/rc.d/ipfw_netflow
+++ b/etc/rc.d/ipfw_netflow
@@ -54,7 +54,7 @@ ipfw_netflow_status()
ipfw_netflow_start()
{
ipfw_netflow_is_running && err 1 "ipfw_netflow is already active"
- ipfw add ${ipfw_netflow_rule} ngtee ${ipfw_netflow_hook} ip from any to any
+ ipfw add ${ipfw_netflow_rule} ngtee ${ipfw_netflow_hook} ip from any to any ${ipfw_netflow_fib:+fib ${ipfw_netflow_fib}}
ngctl -f - <<-EOF
mkpeer ipfw: netflow ${ipfw_netflow_hook} iface0
name ipfw:${ipfw_netflow_hook} netflow