/[smecontribs]/rpms/smeserver-libreswan-xl2tpd/contribs9/smeserver-libreswan-xl2tpd-cleanup-obsoletes.patch
ViewVC logotype

Contents of /rpms/smeserver-libreswan-xl2tpd/contribs9/smeserver-libreswan-xl2tpd-cleanup-obsoletes.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (show annotations) (download)
Thu Jun 21 13:03:30 2018 UTC (6 years, 5 months ago) by jcrisp
Branch: MAIN
CVS Tags: smeserver-libreswan-xl2tpd-0_5-5, smeserver-libreswan-xl2tpd-0_5-7, smeserver-libreswan-xl2tpd-0_5-6, smeserver-libreswan-xl2tpd-0_5-9, smeserver-libreswan-xl2tpd-0_5-8, HEAD
* Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- Fix obsolete forecencaps
- Update required Libreswan version

1 diff -ruN smeserver-libreswan-xl2tpd-0.5.old/root/etc/e-smith/templates/etc/ipsec.d/ipsec.conf/20defaultL2tpd smeserver-libreswan-xl2tpd-0.5/root/etc/e-smith/templates/etc/ipsec.d/ipsec.conf/20defaultL2tpd
2 --- smeserver-libreswan-xl2tpd-0.5.old/root/etc/e-smith/templates/etc/ipsec.d/ipsec.conf/20defaultL2tpd 2018-06-21 14:58:05.684361226 +0200
3 +++ smeserver-libreswan-xl2tpd-0.5/root/etc/e-smith/templates/etc/ipsec.d/ipsec.conf/20defaultL2tpd 2018-06-21 15:00:19.874978246 +0200
4 @@ -37,7 +37,7 @@
5 $OUT .= " keyingtries=3\n";
6 $OUT .= " rekey=no\n";
7 $OUT .= " type=transport\n";
8 - $OUT .= " forceencaps=yes\n";
9 + $OUT .= " encapsulation=yes\n";
10 $OUT .= " right=%any\n";
11 $OUT .= " rightprotoport=17/%any\n";
12 $OUT .= " # Using the magic port of \"0\" means \"any one single port\". This is\n";
13 @@ -57,25 +57,26 @@
14 my $dpdaction = $ipsecDB->get_prop( $ipsecprop, 'dpdaction' ) || "clear\n";
15 $OUT .= " dpdaction=$dpdaction\n";
16
17 - # Some additional config entries if required
18 - # For nat connections you can use "vhost:%no,%priv"
19 - # Disabled for now - needs some thought
20 -
21 - my $rightsubnet = $ipsecDB->get_prop( $ipsecprop, 'rightsubnet' ) || '';
22 - if ($rightsubnet ne '') {
23 - $OUT .= " rightsubnet=$rightsubnet\n";
24 - }
25 -
26 - my $leftsourceip = $ipsecDB->get_prop( $ipsecprop, 'leftsourceip' ) || '';
27 - if ($leftsourceip ne '') {
28 - $OUT .= " leftsourceip=$leftsourceip\n";
29 - }
30 -
31 - my $leftsubnet = $ipsecDB->get_prop( $ipsecprop, 'leftsubnet' ) || '';
32 - if ($leftsubnet ne '') {
33 - $OUT .= " leftsubnet=$leftsubnet\n";
34 - }
35 + # Some additional config entries if required
36 + # For nat connections you can use "vhost:%no,%priv"
37 + # Disabled for now - needs some thought
38 + # Probably only needed if you are doing subnet <-> subnet
39 + # Most likely not required for dialin
40 +
41 + my $rightsubnet = $ipsecDB->get_prop( $ipsecprop, 'rightsubnet' ) || '';
42 + if ( $rightsubnet ne '' ) {
43 + $OUT .= " rightsubnet=$rightsubnet\n";
44 + }
45 +
46 + my $leftsourceip = $ipsecDB->get_prop( $ipsecprop, 'leftsourceip' ) || '';
47 + if ( $leftsourceip ne '' ) {
48 + $OUT .= " leftsourceip=$leftsourceip\n";
49 + }
50 +
51 + my $leftsubnet = $ipsecDB->get_prop( $ipsecprop, 'leftsubnet' ) || '';
52 + if ( $leftsubnet ne '' ) {
53 + $OUT .= " leftsubnet=$leftsubnet\n";
54 + }
55
56 -
57 }
58 }

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed