Michael Tremer
053a582d3a
ipsec-policy: Do no create DROP rules for on-demand mode
...
This is not necessary and gets in the way if users have SNAT rules or
other things that make the check be in the wrong place.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2021-06-11 16:15:37 +00:00
Michael Tremer
6826364580
ipsec-*: Name some more configuration variables
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
c32fc72e36
ipsec-policy: Correct open ports for connections on aliases
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
5a9c9ff312
ipsec-policy: Don't install any block rules for connections with an interface
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
b54cd874b9
ipsec-policy: Permit GRE traffic for GRE connections
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
2704dbbc28
ipsec-policy: Variables don't match those from the CGI
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
4cf4f8f623
ipsec-policy: Parse all configuration settings
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
6cf8bc9161
IPsec: Move opening ports from ipsecctrl into ipsec-policy script
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
Michael Tremer
6c920b19cd
IPsec: Rename ipsec-block script to ipsec-policy
...
This is a more general name for a script that will be extended
soon to do more than just add blocking rules.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-04 18:20:36 +00:00
