Correctly return phase2 status for tunnels with hostnames
Modify our function to process according to the new IPsec config.xmlarray format of 2.0This should now correctly reload ipsec tunnels where a hostname is usedas the endpoint.TODO: The UI pages still need to be changed for the granular IPsecpolicy reloading.
Improved logic to delete old ipsec policies. It can now be used in a generic fashion to replacespd policies instead of just dynamic dns endpoints.We know leave files in tmp which are picked up by vpn_ipsec_refresh_policies().This allows us to use the apply buton again.
Replace another route -n get command. These can sometimes hang and cause a filter reload to get stuck.Always use netstat -rn instead, these behave differently and can not hang according to ermal@
Oops forgot to modify and commit the code that tells racoon to re-read the configuration files.
Make rc.newipsecdns reload dynamic DNS tunnels
Add a function that compares current DNS to the dnscache file.If they are not identical it will return the old Ip addresses which canbe used for removal of old items before adding new ones.This is used by the rc.newipsecdns script when the remote ipsec gateway...
Port the code for granular adding and removing IPsec SPD policies.This is the backend part of it which is uses by rc.newipsecdns when ahostname changes IP
Fix variable name. This unbreaks the intial links if you try to configure it manually.
Load dummynet if per user bandwidth is active on CP.
View revisions
Also available in: Atom