mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Lookup remote endpoint in routing table before attempting to delete route.

Browse Source
This commit is contained in:
Seth Mos 2008-11-06 13:00:32 +00:00
parent ba1e757214
commit 7d0e5565fe
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
etc/inc/vpn.inc
View File

@ -173,6 +173,10 @@ function vpn_ipsec_configure($ipchg = false) {
return 0;
}
/* this loads a route table which is used to determine if a route needs to be removed. */
exec("/sbin/netstat -rn", $route_arr, $retval);
$route_str = implode("\n", $route_arr);
if ((is_array($ipseccfg['tunnel']) && count($ipseccfg['tunnel'])) ||
isset($ipseccfg['mobileclients']['enable'])) {
@ -260,12 +264,15 @@ function vpn_ipsec_configure($ipchg = false) {
if(! ip_in_subnet($tunnel['remote-gateway'], "{$subnet_ip}/{$subnet_bits}")) {
if(is_ipaddr($gatewayip)) {
log_error("IPSEC interface is not WAN but {$tunnel['interface']}, adding static route for VPN endpoint {$tunnel['remote-gateway']} via {$gatewayip}");
mwexec("/sbin/route delete -host {$tunnel['remote-gateway']};/sbin/route add -host {$tunnel['remote-gateway']} {$gatewayip}");
mwexec("/sbin/route delete -host {$tunnel['remote-gateway']}");
mwexec("/sbin/route add -host {$tunnel['remote-gateway']} {$gatewayip}");
}
}
}
} else {
mwexec("/sbin/route delete -host {$tunnel['remote-gateway']}");
if(preg_match("/{$tunnel['remote-gateway']}/", $route_str)) {
mwexec("/sbin/route delete -host {$tunnel['remote-gateway']}");
}
}
}