From eecc882825ad1328933a39fc982fb35b7bbe5f2a Mon Sep 17 00:00:00 2001 From: Stephan de Wit Date: Thu, 19 Oct 2023 09:59:47 +0200 Subject: [PATCH] openvpn: do not flush state table on linkdown This has the effect of killing valid states possibly unrelated to openvpn that are propagated via pfsync --- src/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown b/src/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown index 32fef7228..82e2fc473 100755 --- a/src/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown +++ b/src/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown @@ -1,4 +1,4 @@ #!/bin/sh -/usr/local/sbin/ifctl -4ci ${1} -/usr/local/sbin/ifctl -6ci ${1} +/usr/local/sbin/ifctl -4rd -i ${1} +/usr/local/sbin/ifctl -6rd -i ${1}