From 0f488a166bd7d746e30ef39565070524dcdff791 Mon Sep 17 00:00:00 2001 From: Franco Fichtner Date: Tue, 6 Jul 2021 12:30:51 +0200 Subject: [PATCH] firewall: use permanent promiscuous mode for pflog0 --- src/etc/inc/filter.inc | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/etc/inc/filter.inc b/src/etc/inc/filter.inc index e043946cf..6fb430b8a 100644 --- a/src/etc/inc/filter.inc +++ b/src/etc/inc/filter.inc @@ -101,9 +101,10 @@ function filter_pflog_start($verbose = false) flush(); } - if (isvalidpid('/var/run/filterlog.pid')) { - killbypid('/var/run/filterlog.pid', 'TERM', true); - } + killbypid('/var/run/filterlog.pid', 'TERM', true); + + /* enable permanent promiscuous mode to avoid dmesg noise */ + mwexec('/sbin/ifconfig pflog0 promisc'); mwexec('/usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid');