From 2325ae6a5086cf26c483c47aa0b218190594c5c6 Mon Sep 17 00:00:00 2001
From: atlas <atlas@hyperhive.local>
Date: Sun, 15 Nov 2026 01:25:43 +0100
Subject: [PATCH] egress anti-spoof: the legacy-name case pins drop, the
 non-default

---
 nix/module-eval/core-toggle.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/module-eval/core-toggle.nix b/nix/module-eval/core-toggle.nix
index 2de1cd3e8..8923033c5 100644
--- a/nix/module-eval/core-toggle.nix
+++ b/nix/module-eval/core-toggle.nix
@@ -1740,7 +1740,7 @@ let
       name = "the old network.egress names still set the egress options";
       ok =
         egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.forward == "accept"
-        && egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.antiSpoof == "log"
+        && egressForwardAcceptLegacy.services.hyperhive.deploy.hive-controller.egress.antiSpoof == "drop"
         &&
           egressForwardAcceptLegacy.services.hyperhive.network.egress.ruleset
           == egressForwardAccept.services.hyperhive.network.egress.ruleset