]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit
projects / people / pmueller / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c5d8554) | patch
ipsec-policy: Do no create DROP rules for on-demand mode
authorMichael Tremer <michael.tremer@ipfire.org>
Fri, 11 Jun 2021 16:15:37 +0000 (16:15 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Fri, 11 Jun 2021 16:15:37 +0000 (16:15 +0000)
commit053a582d3a68456f861d4e7ab3529163ee84ec47
tree884b507d5b78252b0ebb7b5d562b781aa388ab23tree | snapshot
parentc5d855492ed16a8f832eea617fc713f7742989a0commit | diff
ipsec-policy: Do no create DROP rules for on-demand mode

This is not necessary and gets in the way if users have SNAT rules or
other things that make the check be in the wrong place.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/firewall/ipsec-policy diff | blob | blame | history
config/rootfiles/core/158/filelists/files diff | blob | blame | history
Peter's tree of IPFire 2.x