From 370fdcffcba64a9419575401c7f118c10aa7fb26 Mon Sep 17 00:00:00 2001 From: Stephan de Wit Date: Mon, 24 Mar 2025 15:59:13 +0100 Subject: [PATCH] system: set senderr_demotion_factor to 0, fixes https://github.com/opnsense/core/issues/8437 --- src/etc/inc/system.inc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc index 2297ba1b2..109dae929 100644 --- a/src/etc/inc/system.inc +++ b/src/etc/inc/system.inc @@ -71,7 +71,7 @@ function system_sysctl_defaults() /* notes: * - set 'optional' => true for values that should no longer be enforced by default - /* - 'description' and 'type' can be used to indicate persistence of these values + * - 'description' and 'type' can be used to indicate persistence of these values * when in reality these are not available due to kernel modules unloaded or * compile time options unset (like debugging) * - always set 'default' so the backend can use it and the user can see it @@ -89,6 +89,7 @@ function system_sysctl_defaults() 'net.enc.in.ipsec_filter_mask' => [ 'default' => '2' ], /* after processing */ 'net.enc.out.ipsec_bpf_mask' => [ 'default' => '1' ], /* before processing */ 'net.enc.out.ipsec_filter_mask' => [ 'default' => '1' ], /* before processing */ + 'net.inet.carp.senderr_demotion_factor' => [ 'default' => '0' ], 'net.inet.icmp.drop_redirect' => [ 'default' => '1' ], 'net.inet.icmp.icmplim' => [ 'default' => '0' ], 'net.inet.icmp.log_redirect' => [ 'default' => '0' ],