From 4a4d72afd8f482813ccd9057f33f1269f03ddf9d Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 14 Nov 2019 09:23:36 +0100
Subject: [PATCH] system: bootstrap a default value and always apply #3806

So that users are not seeing issues because they haven't done a
config reset yet.  It also allows us to bump the default again
if needed.
---
 src/etc/config.xml.sample | 2 +-
 src/etc/inc/system.inc    | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/etc/config.xml.sample b/src/etc/config.xml.sample
index 2a988cdc9..25a7be89d 100644
--- a/src/etc/config.xml.sample
+++ b/src/etc/config.xml.sample
@@ -208,7 +208,7 @@
     <item>
       <descr><![CDATA[Maximum outgoing UDP datagram size]]></descr>
       <tunable>net.local.dgram.maxdgram</tunable>
-      <value>8192</value>
+      <value>default</value>
     </item>
   </sysctl>
   <system>
diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc
index bdd3a2d7a..6c17ecb08 100644
--- a/src/etc/inc/system.inc
+++ b/src/etc/inc/system.inc
@@ -106,6 +106,7 @@ function get_default_sysctl_value($id)
         'net.link.bridge.pfil_member' => '1',
         'net.link.bridge.pfil_onlyip' => '0',
         'net.link.tap.user_open' => '1',
+        'net.local.dgram.maxdgram' => '8192',
         'security.bsd.see_other_gids' => '0',
         'security.bsd.see_other_uids' => '0',
         'vfs.read_max' => '32',
@@ -128,6 +129,7 @@ function system_sysctl_get()
         'net.enc.in.ipsec_filter_mask' => '2', /* after processing */
         'net.enc.out.ipsec_bpf_mask' => '1', /* before processing */
         'net.enc.out.ipsec_filter_mask' => '1', /* before processing */
+        'net.local.dgram.maxdgram' => 'default',
     );
 
     if (isset($config['sysctl']['item'])) {