Commit Graph

186 Commits

Author SHA1 Message Date
Michael Tremer
207c9813bc Merge branch 'strongswan-5' into thirteen 2012-10-09 00:30:33 +02:00
Michael Tremer
e218d500dd Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-5 2012-09-12 16:14:31 +02:00
Michael Tremer
cacc836020 misc-progs: Remove getiptstate. 2012-08-15 16:49:00 -04:00
Michael Tremer
ba890f6584 ipsecctrl: Don't shout when we have found an interface. 2012-08-08 00:40:43 +02:00
Arne Fitzenreiter
b431bfce48 Merge remote-tracking branch 'origin/master' into kernel-update 2012-07-21 23:54:31 +02:00
Michael Tremer
9f0b5c9f4d ipsec: Improve connection reloading.
As pluto is no longer present, there is a lot to
clean up. The connection rename hack is no longer needed
and the whole ipsec stack can be controlled with
the "ipsec" command.
2012-07-19 16:46:00 +02:00
Michael Tremer
75bc929eb9 Update connections.cgi: Show byte counters.
The connections.cgi file has been rewritten to read
the needed information directly from the kernel.

Byte counters have been added which show how much data
has been transmitted over one connection in each
direction.
2012-07-18 12:21:23 +02:00
Michael Tremer
99b01b8485 openvpn: Fix starting/stopping errors in the control binary.
net2net connection were not started when roadwarrior connections
were existant.
2012-01-07 22:21:08 +01:00
Michael Tremer
d4f2fb979a openvpnctrl: Fix adding firewall rules. 2011-09-04 20:37:49 +02:00
Arne Fitzenreiter
44f8687ba2 Merge commit 'ms/openvpn-n2n' into next 2011-09-04 12:12:45 +02:00
Arne Fitzenreiter
6e2ba31bff ipsec: change ipsecctrl and vpn-watch to restart a single tunnel. 2011-08-22 20:47:35 +02:00
Michael Tremer
64f0c3543d openvpnctrl: Add option to start all n2n connections at once. 2011-07-27 18:40:12 +02:00
Michael Tremer
81a789d931 openvpnctrl: Force 'modprobe tun' before starting the openvpn daemon. 2011-07-19 11:42:53 +02:00
Michael Tremer
c894a34234 openvpnctrl: Disable debug mode. 2011-07-08 18:30:41 +02:00
Michael Tremer
91a0a2217a openvpnctrl: Fix initialization of the program.
Firewall rules are now set properly and a detection for the
connection type was added.
2011-07-08 17:40:59 +02:00
Michael Tremer
3717a205a6 Merge branch 'static-routing' into next 2011-07-06 19:38:29 +02:00
Michael Tremer
daf9669080 Add binary "rebuildroutes" to setup routes from the webif. 2011-07-05 19:11:23 +02:00
Michael Tremer
1129c37a95 openvpnctrl: Fix SEGV in sprintf() call. 2011-07-05 12:45:51 +02:00
Arne Fitzenreiter
85cbc0a08f ipsec: fix ike firewall rule to support nat traversal. 2011-07-04 23:09:05 +02:00
Arne Fitzenreiter
3e077ef345 ipsec: add ikev2 down to ipseccrtl. 2011-07-03 11:21:49 +02:00
Michael Tremer
7d653d51f8 openvpnctrl: Fix for while loop that had no break. 2011-07-01 19:40:44 +02:00
Michael Tremer
d4c8b6bec2 openvpnctrl: Remove PID file after an openvpn process was killed. 2011-06-29 20:02:31 +02:00
Michael Tremer
80ca8bd0f5 openvpnctrl: Fix some compiler warnings.
(Hopefully) no functional changes.
2011-06-29 19:58:01 +02:00
Michael Tremer
858d8d9092 openvpnctrl: Create firewall rules properly if roadwarrior server is disabled. 2011-06-29 19:51:24 +02:00
Arne Fitzenreiter
0d181206ca ipsec: change ipsecctrl for status and reload of charon. 2011-06-26 15:15:12 +02:00
Michael Tremer
2bcff894ac openvpnctrl: Support killing only the roadwarrior server. 2011-06-25 17:57:57 +02:00
Michael Tremer
39877197d6 openvpnctrl: Implement support to kill connections. 2011-06-25 11:47:42 +02:00
Michael Tremer
0708113765 openvpnctrl: Update firewall rules when starting a n2n connection.
This makes sure, that all rules (esp. for new connections) are up
and running.
2011-06-25 10:59:47 +02:00
Arne Fitzenreiter
6925b8ef58 openvpn: Add control options to openvpnctrl binary for n2n. 2011-05-14 19:24:47 +02:00
Michael Tremer
aebf1b54e1 fireinfo: Run action that was set on the webinterface immediately. 2011-01-04 00:30:14 +01:00
Arne Fitzenreiter
3118e3a24e ntp: new enabled at default
Fix ipfire ntp server defaults.
Fix symlink problem if ntp was disabled.
2010-12-02 16:30:11 +01:00
Christian Schmidt
a4883c68c1 Fixed redirector schedules - This fixes bug #0000685 2010-07-13 11:35:00 +02:00
Christian Schmidt
584efcab4f Fixed rebuildhost bug - this fixes bug #0000509 2010-06-25 18:25:37 +02:00
Arne Fitzenreiter
44b5666bc7 Fix ipseccrtl, add 10min restart of unrouted connections to vpn-watch. 2010-06-25 22:52:43 +02:00
Arne Fitzenreiter
16295ef4a0 ipsecctrl: fix compile error. 2010-06-25 07:36:39 +02:00
Arne Fitzenreiter
734b67d20d ipsecctrl: use ipsec restart to turn connection on. 2010-06-25 00:00:51 +02:00
Arne Fitzenreiter
1f324fd71d ipsecctrl: remove fw-rules clear because strongswan try to do this also. 2010-06-24 23:35:40 +02:00
Arne Fitzenreiter
798023e9a6 ipsecctrl: increase delay after ipsec reload. 2010-06-24 20:44:37 +02:00
Arne Fitzenreiter
45f2673554 Allow also ip/netmask for blue access. 2010-06-24 13:14:05 +02:00
Arne Fitzenreiter
90070fc927 Fix ipsecctrl hang at start of a connection.
Fixes bug #0000663
2010-06-21 23:13:06 +02:00
Arne Fitzenreiter
ba149d470b Fix ipsectrl I and ipsectrl R terminate vpn-watch. 2010-05-29 14:24:47 +02:00
Christian Schmidt
77e9b64c80 Fixed async logging feature. 2010-05-12 22:08:15 +02:00
Arne Fitzenreiter
64dc6c92f1 Remove output of "ipsecctrl R".
:
2010-05-10 21:33:51 +02:00
Arne Fitzenreiter
98065e83ed Change ipsec up/down of a tunnel. 2010-05-08 15:35:11 +02:00
Michael Tremer
8cc93ee11f misc-progs: Cleanup chain creation of wirelessctrl.
This changes the behaviour of the wirelessctrl binary
that will no longer create useless rules in the WIRELESSINPUT
and WIRELESSFORWARD chains that have no use at all.

So we keep this chain empty if /var/ipfire/wireless/nodrop
is existant.
2010-04-23 14:18:01 +02:00
Christian Schmidt
bf137f5bb6 Fixed cosemtic naming of firewall groups for webinterface. 2010-04-23 13:21:09 +02:00
Arne Fitzenreiter
331699d576 Change ipsecctrl Tunnel up and down. 2010-04-22 07:41:28 +02:00
Arne Fitzenreiter
db073a101e Some changes for strongswan.
Still need a replacement for ipsec auto --replace
2010-03-27 21:15:46 +01:00
Arne Fitzenreiter
6652626c88 Add strongswan (4.3.6) for testing. 2010-03-20 22:31:43 +01:00
Arne Fitzenreiter
f81179c3b2 Fix build of syslogdctrl. 2010-03-18 07:59:24 +01:00