From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 28 Jul 2020 17:18:18 +0000 (+0000)
Subject: location: Restart IPsec after firewall was restarted
X-Git-Tag: v2.25-core148~13
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2ae1c23f6200b0820a54ce30fe0677820094ff51;p=ipfire-2.x.git

location: Restart IPsec after firewall was restarted

strongswan creates rules in iptables which are being dropped when
the firewall is being restarted.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/src/scripts/convert-to-location b/src/scripts/convert-to-location
index 9149b854d3..428a91d342 100755
--- a/src/scripts/convert-to-location
+++ b/src/scripts/convert-to-location
@@ -47,6 +47,11 @@ if [ -f "$FW_CONF_DIR/geoipblock" ]; then
 
 	# Regenerate firewall chains.
 	/etc/init.d/firewall restart
+
+	# Restart IPsec for dropped iptables rules
+	if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
+		/etc/init.d/ipsec restart
+	fi
 fi
 
 # Finished.