diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2009-03-04 05:29:10 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2009-03-04 05:29:10 +0000 |
| commit | 49edfda2bb632d2b6711a06fcf917fe70dfb09c5 (patch) | |
| tree | c58bd145fe8747e940959c33ba7d117ef9c5dfc3 | |
| parent | 49759429618e40886a408ad2706abbed052db3fe (diff) | |
Don't synchronise carp states in default PF ruleset, these get created
on each host and end up conflicting, so they never sync anyways.
ok dlg henning
| -rw-r--r-- | etc/rc | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -1,4 +1,4 @@ -# $OpenBSD: rc,v 1.321 2008/12/11 15:44:00 naddy Exp $ +# $OpenBSD: rc,v 1.322 2009/03/04 05:29:09 mcbride Exp $ # System startup script run by init on autoboot # or after single-user. @@ -268,7 +268,7 @@ if [ X"${pf}" != X"NO" ]; then RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type routersol" RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type routeradv" fi - RULES="$RULES\npass proto carp" + RULES="$RULES\npass proto carp keep state (no-sync)" case `sysctl vfs.mounts.nfs 2>/dev/null` in *[1-9]*) # don't kill NFS |