From 3d885de573f4bf8cf3e283e25c8464b22e49c26d Mon Sep 17 00:00:00 2001 From: Timo Makinen Date: Wed, 17 Mar 2021 20:31:41 +0000 Subject: [PATCH] ifstated: Fix fireall problems when fsol-gw is booted For some reason firewall rules are not correctly loaded during boot so reload them when ifstated starts. --- roles/ifstated/files/ifstated-fsol.conf | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/roles/ifstated/files/ifstated-fsol.conf b/roles/ifstated/files/ifstated-fsol.conf index 4fc18b5..6814ccd 100644 --- a/roles/ifstated/files/ifstated-fsol.conf +++ b/roles/ifstated/files/ifstated-fsol.conf @@ -1,5 +1,18 @@ + +init-state auto + carp_up = "carp145.link.up" +state auto { + run "pfctl -f /etc/pf.conf" + if $carp_up { + set-state master + } + if ! $carp_up { + set-state backup + } +} + state backup { init { run "/usr/local/sbin/birdc disable ospf1"