Michael Tremer cda384a280 ipsec: Do not reject connections in on-demand mode ...

When an on-demand VPN connection is not up, the packets will
traverse the firewall and be rejected by the IPSECBLOCK chain
which will cause that an ICMP error message will be sent to
the client. If that does not happen and the packet is being
silently dropped, the client will retransmit and by then
the VPN connection will hopefully be up.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-03-24 13:24:42 +01:00

..

convert-dmz

Make firewall convert scripts more robust.

2014-01-18 18:28:07 +01:00

convert-outgoingfw

Firewall: outgoingconverter fix for ipfire-src

2014-04-28 14:27:54 +02:00

convert-portfw

BUG10984: Fix portforwardconverter for upgrades before core 77

2015-11-19 12:53:38 +00:00

convert-xtaccess

Make firewall convert scripts more robust.

2014-01-18 18:28:07 +01:00

firewall-lib.pl

firewall: Support multiple subnets per IPsec tunnel

2015-09-22 00:26:37 +01:00

firewall-policy

firewall: Fix MAC filter

2016-02-05 10:24:03 +00:00

geoipblock

Add default config file for geoipblock.

2015-01-04 00:56:00 +01:00

ipsec-block

ipsec: Do not reject connections in on-demand mode

2017-03-24 13:24:42 +01:00

p2protocols

firewall: Disable the P2P blocker by default

2015-05-20 13:37:35 +02:00

rules.pl

BUG10994: SNAT rules are missing the outgoing interface

2015-12-15 13:53:03 +00:00