]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
Follow disable_ipv6 for Pulse and Fortinet
authorDaniel Lenski <dlenski@gmail.com>
Thu, 17 Jun 2021 17:25:15 +0000 (10:25 -0700)
committerDaniel Lenski <dlenski@gmail.com>
Thu, 17 Jun 2021 17:34:05 +0000 (10:34 -0700)
commit80e6f8aadd16c268fb58bc07e9362e31d2382873
tree7a42fa68c27c586783528ed989a83febbbe8dcd0
parentf5fe88c45a6317f83a58f6a0f47dcf2fa4319003
Follow disable_ipv6 for Pulse and Fortinet

As with other protocols (AnyConnect, F5, GP), the behavior of 'disable_ipv6'
for these protocols is relatively "shallow": if set, it will cause
OpenConnect to ignore any IPv6 address or netmask sent by the server, but
will *not* ignore IPv6 split-{in,ex}cludes or IPv6 addresses of DNS servers.

More thorough IPv6-ignoring could be handled by the vpnc-script, or cleaned
up as part of a future change to simplify IP configuration and routing
across protocols.

(The lack of support for --disable-ipv6 in Pulse was noted in
https://gitlab.com/openconnect/openconnect/-/issues/254.)

Signed-off-by: Daniel Lenski <dlenski@gmail.com>
fortinet.c
pulse.c