From dbb95f387bb1b904bd9fcb5350acff5ff7e02948 Mon Sep 17 00:00:00 2001 From: Chris Buechler Date: Thu, 6 Nov 2014 12:49:06 -0600 Subject: [PATCH] set install_routes=no for charon to avoid the issues noted in ticket --- etc/inc/vpn.inc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index d13e02a1a9..55ed8032b8 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -288,7 +288,8 @@ charon { threads = 16 ikesa_table_size = 32 ikesa_table_segments = 4 - init_limit_half_open = 1000; + init_limit_half_open = 1000 + install_routes = no # XXX: There is not much choice here really users win their security! i_dont_care_about_security_and_use_aggressive_mode_psk=yes