From 58070e1cf7526bdceedf20b0f805de76bcae0559 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Mon, 23 Apr 2012 22:11:26 -0400
Subject: [PATCH] routes should not be skipped when IPsec is on WAN, as WAN may
 not be the default gateway.

---
 etc/inc/vpn.inc | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index e65708a11c..0e21c689f5 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -911,7 +911,7 @@ EOD;
 				else
 					$parentinterface = $ph1ent['interface'];
 
-				if (($parentinterface <> "wan") && (is_ipaddr($rgip))) {
+				if (is_ipaddr($rgip)) {
 					/* add endpoint routes to correct gateway on interface */
 					if (interface_has_gateway($parentinterface)) {
 						$gatewayip = get_interface_gateway("$parentinterface");
@@ -928,8 +928,7 @@ EOD;
 							}
 						}
 					}
-				} else if(is_ipaddr($rgip))
-					mwexec("/sbin/route delete -host {$rgip}", true);
+				} 
 			}
 
 		}