Commit Graph

46 Commits

Author SHA1 Message Date
Tobias Brunner a6f0e19bf5 Fixed some typos, courtesy of codespell 2020-11-04 10:06:46 +01:00
Tobias Brunner 3fa8c3e529 updown: Pass interface ID to updown script 2019-04-04 09:31:38 +02:00
Tobias Brunner 40ec7f998a _updown: Remove printf calls for identities
This was apparently for compatibility with pluto, which escaped some
characters as octal values.
2018-04-12 15:17:24 +02:00
Tobias Brunner 382f8a334a updown: Add rules to allow IP6IP6 traffic used for uncompressed small packets 2015-09-21 10:12:17 +02:00
Tobias Brunner 1de31bcc2b updown: Pass virtual IPs assigned to a peer to the updown script
Previously only received virtual IPs were available.

References #1008.
2015-08-06 16:30:08 +02:00
Tobias Brunner fd25fb3118 _updown: Remove obsolete stuff from default script 2015-03-06 16:51:50 +01:00
Tobias Brunner 8284e56d5b _updown: Remove obsolete man pages 2015-01-05 13:44:16 +01:00
Martin Willi dcae0a3935 updown: Inverse comment of VPN_LOGGING variable, as it is enabled by default
Fixes #780.
2014-12-02 15:02:41 +01:00
Tobias Brunner 6d1198e71d updown: Allow IPIP traffic if IPComp was negotiated
The kernel implicitly creates an IPIP SA if an IPComp SA is installed.
This SA is used inbound for small packets that are not compressed.

Since the addresses are different (they are the tunnel addresses not
those of the tunneled traffic) additional rules are required if the
traffic selector does not cover the tunnel addresses (e.g. due to a NAT).

For SAs with multiple traffic selectors duplicate rules will get installed.
2014-01-23 10:27:12 +01:00
Tobias Brunner cf4a7395aa updown: Add PLUTO_IPCOMP to indicate if IPComp was negotiated 2014-01-23 10:27:12 +01:00
Tobias Brunner 4c185d11ad updown: Properly configure ICMP[v6] message type and code in firewall rules 2013-10-17 16:57:39 +02:00
Tobias Brunner 9739a0bf67 updown: Pass ICMP[v6] message type and code to updown script
The type is passed in $PLUTO_MY_PORT and the code in $PLUTO_PEER_PORT.
2013-10-17 16:57:39 +02:00
Martin Willi 4817595876 updown: Install forwarding rules with the actually used protocol 2013-10-11 10:15:22 +02:00
Martin Willi c5d9b133e0 updown: Add a PLUTO_PROTO variable set to 'ah' or 'esp' 2013-10-11 10:15:21 +02:00
Martin Willi 881e9a7e2e updown: remove description of unsupported PLUTO_ variables
These have been set by pluto, but are not by charons updown plugin.
2013-08-08 14:48:32 +02:00
Emanuil Hristov 2ce403438f updown: pass IKE_SA unique ID in PLUTO_UNIQUEID 2013-05-16 10:13:22 +02:00
Martin Willi 0be946dce3 Use the GEN silent rule when generating files with sed 2013-05-06 15:04:56 +02:00
Martin Willi 2df155958c Added a note to _updown for the new PLUTO_MY_SOURCEIP* variables 2012-08-30 16:43:45 +02:00
Martin Willi 2b08ae4524 Add description about DNS server variables to _updown 2012-08-21 09:38:01 +02:00
Andreas Steffen 6d71f4dcb9 updown script variable is called PLUTO_UDP_ENC 2010-09-03 12:58:10 +02:00
Andreas Steffen 16c97c8e59 documented the new PLUTO environment variables available in the updown script 2010-07-17 13:41:40 +02:00
Andreas Steffen fcfd54acde rename environment variable to PLUTO_XAUTH_ID 2010-06-08 23:18:51 +02:00
Andreas Steffen 964f6372cc make an optional XAUTH user ID available in the updown script 2010-06-08 17:50:22 +02:00
Martin Willi b7b5653386 Use macros to define --with options 2009-09-07 15:00:45 +02:00
Martin Willi 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am 2009-09-07 11:48:03 +02:00
Andreas Steffen 14c408ee4a _updown script fix for ALT Linux, courtesy of Michael Shigorin 2009-05-29 08:10:02 +02:00
Tobias Brunner 8af25c56af some typos 2009-04-30 17:15:28 +00:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi 466f11bfaf added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00
Andreas Steffen bb7b613b83 eliminated bashisms in _updown scripts 2008-07-18 10:04:40 +00:00
Andreas Steffen 52bb1876ec sbindir is required in the PATH of _updown 2007-12-12 22:12:10 +00:00
Andreas Steffen c2bb1ecacb define a minimum PATH environment 2007-12-12 14:56:35 +00:00
Andreas Steffen b14a876858 the _updown scripts now fully supports ip6tables firewall rule insertion and deletion 2007-11-07 12:20:15 +00:00
Andreas Steffen bd55836e48 fixed ipv6 target in _updown script 2007-11-06 13:46:35 +00:00
Andreas Steffen d50e491b7b added RCSID 2007-10-08 19:59:18 +00:00
Andreas Steffen c5dfb88ab8 _updown removed from distribution 2007-08-29 11:59:52 +00:00
Andreas Steffen 12fe0e60df set ignore properties 2007-08-28 07:02:51 +00:00
Martin Willi 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid)
added configure option --with-routing-table-prio=
2007-08-27 14:53:42 +00:00
Martin Willi 4e411c8361 added --with-routing-table= configure option 2007-08-27 11:15:35 +00:00
Andreas Steffen ca694c614d improved source routing table creation 2007-08-03 17:59:13 +00:00
Andreas Steffen f6f55adb3a use table 100 for source routing 2007-08-03 10:05:15 +00:00
Andreas Steffen 7a1f49c314 do not delete existing routes with NETKEY 2007-06-08 07:01:17 +00:00
Andreas Steffen ef01451916 insert route only in case of sourceip 2007-06-06 13:30:27 +00:00
Martin Willi f2c2d395ff - introduced autotools
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
2006-05-16 14:24:03 +00:00
Martin Willi 1029d84d23 2006-04-28 10:51:19 +00:00