diff --git a/config/firewall/ipsec-policy b/config/firewall/ipsec-policy index 1ad4de650..334e2d9bb 100644 --- a/config/firewall/ipsec-policy +++ b/config/firewall/ipsec-policy @@ -34,6 +34,11 @@ block_subnet() { local subnet="${1}" local action="${2}" + # Nothing to be done if no action is requested + if [ "${action}" = "none" ]; then + return 0 + fi + # Don't block a wildcard subnet if [ "${subnet}" = "0.0.0.0/0" ] || [ "${subnet}" = "0.0.0.0/0.0.0.0" ]; then return 0 @@ -108,7 +113,7 @@ install_policy() { case "${route}" in route) - action="drop" + action="none" ;; *) action="reject" diff --git a/config/rootfiles/core/158/filelists/files b/config/rootfiles/core/158/filelists/files index e7a6a3073..e39449614 100644 --- a/config/rootfiles/core/158/filelists/files +++ b/config/rootfiles/core/158/filelists/files @@ -8,6 +8,7 @@ srv/web/ipfire/cgi-bin/pakfire.cgi srv/web/ipfire/cgi-bin/traffic.cgi srv/web/ipfire/cgi-bin/vpnmain.cgi srv/web/ipfire/html/images/apple.png +usr/lib/firewall/ipsec-policy var/ipfire/backup/bin/backup.pl var/ipfire/countries.pl var/ipfire/general-functions.pl