]> git.ipfire.org Git - thirdparty/strongswan.git/commit
charon-nm: Allow configurable remote traffic selectors
authorThomas <299636+heldchen@users.noreply.github.com>
Sun, 24 May 2020 11:54:31 +0000 (13:54 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 25 May 2020 09:50:46 +0000 (11:50 +0200)
commit04db34a3a748e74dc9199834cadad78e3c307fa3
treec071fcabf748e2df371efe5eeac413b2de6c7e91
parent3a54206c0844e0b6410f61cca15ea783509d8b3e
charon-nm: Allow configurable remote traffic selectors

This change allows to customize the previously hard-coded remote traffic
selectors.

This does not actually write the newly added "remote-ts" configuration option
into NetworkManager's configuration file, but will use an existing value.
Exposing the config setting in the GUI could be done later if this is a
desired change.

Use case:  remote firewall appliance wrongly accepts the `0.0.0.0/0` TS but
does not actually route external traffic, leaving the user with a partially
working internet connection.

Closes strongswan/strongswan#173.
src/charon-nm/nm/nm_service.c