vti: Disable policy lookups for VTI devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/functions/functions.ip-tunnel b/src/functions/functions.ip-tunnel
index df59aadea2ae377783f0b1f4476727befc34144c..5e6bd8e63f2ae2990fbe7bea78b69e29a13a2f24 100644 (file)
--- a/src/functions/functions.ip-tunnel
+++ b/src/functions/functions.ip-tunnel
@@ -109,6 +109,13 @@ ip_tunnel_add() {
                error "Could not create tunnel device ${device}"
                return ${EXIT_ERROR}
        fi
+
+       # Disable policy lookups for VTI devices
+       if [ "${mode}" = "vti" ]; then
+               sysctl_set "net.ipv4.conf.${device}.disable_policy" "1"
+       fi
+
+       return ${EXIT_OK}
 }
 
 ip_tunnel_del() {