diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-17 20:54:54 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-17 20:54:54 +0200 |
| commit | 272b6e646d64651af0b5e8e726021e4fb09cd872 (patch) | |
| tree | d0b5e93b08b792da7654b5dd0e48cd9a050472ac /src/migration-scripts/ipsec | |
| parent | a189b6b7e8ee991cc0fc7d13ee90d588ea5ca15d (diff) | |
| download | vyos-1x-272b6e646d64651af0b5e8e726021e4fb09cd872.tar.gz vyos-1x-272b6e646d64651af0b5e8e726021e4fb09cd872.zip | |
wlb: T9472: make inbound-interface "any" match traffic
"inbound-interface any", offered by completion, was rendered as an
interface literally named "any" and matched no packet, so the rule never
balanced anything.
It now matches traffic entering on any interface except the WAN interfaces
themselves. Matching those as well would also restore the routing mark on
replies arriving from an ISP and send them straight back to that ISP.
Diffstat (limited to 'src/migration-scripts/ipsec')
0 files changed, 0 insertions, 0 deletions