mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit the backend function that writes out the racoon.conf

Browse Source
This commit is contained in:
Seth Mos 2011-03-14 22:03:54 +01:00
parent e79b24ab35
commit fb17f629ee
1 changed files with 21 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
etc/inc/vpn.inc
View File

@ -142,7 +142,7 @@ function vpn_ipsec_configure($ipchg = false)
continue;
$ep = ipsec_get_phase1_src($ph1ent);
if (!$ep)
if (!is_ipaddr($ep))
continue;
if(!in_array($ep,$ipmap))
@ -186,16 +186,30 @@ function vpn_ipsec_configure($ipchg = false)
if ($ph2ent['pinghost']) {
$iflist = get_configured_interface_list();
foreach ($iflist as $ifent => $ifname) {
$interface_ip = get_interface_ip($ifent);
$local_subnet = ipsec_idinfo_to_cidr($ph2ent['localid'], true);
if (ip_in_subnet($interface_ip, $local_subnet)) {
$srcip = $interface_ip;
break;
if(is_ipaddrv6($ph1ent['src'])) {
$interface_ip = get_interface_ipv6($ifent);
$local_subnetv6 = ipsec_idinfo_to_cidr($ph2ent['localid'], true);
if (ip_in_subnetv6($interface_ip, $local_subnet)) {
$srcip = $interface_ip;
break;
}
} else {
$interface_ip = get_interface_ip($ifent);
$local_subnet = ipsec_idinfo_to_cidr($ph2ent['localid'], true);
if (ip_in_subnet($interface_ip, $local_subnet)) {
$srcip = $interface_ip;
break;
}
}
}
$dstip = $ph2ent['pinghost'];
if(is_ipaddrv6($srcip)) {
$family = "inet6";
} else {
$family = "inet";
}
if (is_ipaddr($srcip))
$ipsecpinghosts .= "{$srcip}|{$dstip}|3\n";
$ipsecpinghosts .= "{$srcip}|{$dstip}|3|{$family}\n";
}
}
$pfd = fopen("{$g['vardb_path']}/ipsecpinghosts", "w");