diff --git a/usr/local/share/bastille/setup.sh b/usr/local/share/bastille/setup.sh index 4bb6256c..a5f438d6 100644 --- a/usr/local/share/bastille/setup.sh +++ b/usr/local/share/bastille/setup.sh @@ -212,6 +212,7 @@ configure_bridge() { else _interface_select="${_auto_if}" fi + # Create bridge and persist on reboot _bridge_name="${_interface_select}bridge" ifconfig bridge0 create @@ -221,6 +222,17 @@ configure_bridge() { sysrc ifconfig_bridge0_name="${_bridge_name}" sysrc ifconfig_${_bridge_name}="addm ${_interface_select} up" + # Set some sysctl values + sysctl net.inet.ip.forwarding=1 + sysctl net.link.bridge.pfil_bridge=0 + sysctl net.link.bridge.pfil_onlyip=0 + sysctl net.link.bridge.pfil_member=0 + echo net.inet.ip.forwarding=1 >> /etc/sysctl.conf + echo net.link.bridge.pfil_bridge=0 >> /etc/sysctl.conf + echo net.link.bridge.pfil_onlyip=0 >> /etc/sysctl.conf + echo net.link.bridge.pfil_member=0 >> /etc/sysctl.conf + + info "\nBridge interface successfully configured: [${_bridge_name}]" else info "\nBridge has alread been configured: [${_bridge_name}]" @@ -244,16 +256,6 @@ configure_vnet() { fi fi - # Set some sysctl values - sysctl net.inet.ip.forwarding=1 - sysctl net.link.bridge.pfil_bridge=0 - sysctl net.link.bridge.pfil_onlyip=0 - sysctl net.link.bridge.pfil_member=0 - echo net.inet.ip.forwarding=1 >> /etc/sysctl.conf - echo net.link.bridge.pfil_bridge=0 >> /etc/sysctl.conf - echo net.link.bridge.pfil_onlyip=0 >> /etc/sysctl.conf - echo net.link.bridge.pfil_member=0 >> /etc/sysctl.conf - # Create default VNET ruleset if [ ! -f /etc/devfs.rules ] || ! grep -oq "bastille_vnet=13" /etc/devfs.rules; then info "\nCreating bastille_vnet devfs.rules"