]> www.infradead.org Git - users/dwmw2/vpnc-scripts.git/commitdiff
Removed automatic adding of NS routes master
authorHeiko Schabert <hs@hs-automation.net>
Fri, 6 May 2022 12:08:32 +0000 (14:08 +0200)
committerHeiko Schabert <heiko.schabert@siemens.com>
Mon, 9 May 2022 10:09:40 +0000 (12:09 +0200)
With openconnect version 9.01 include-split was modified, in a way that
a announced route with netwask 0.0.0.0 will leverage env variable `CISCO_SPLIT_INC`.

Entries inside `CISCO_SPLIT_INC`, always causes that routes to the NS
`INTERNAL_IP4_DNS` are created.

This commit, removes that NS routes are automatically are added.

The same mechanism applies to IP6 as well, which uses
env variable `CISCO_IPV6_SPLIT_INC`

Resolves #38. Alignment with behaviour of NetworkManager openconnect
see [1].

[1] https://gitlab.gnome.org/GNOME/NetworkManager-openconnect/-/blob/main/src/nm-openconnect-service-openconnect-helper.c

Signed-off-by: Heiko Schabert <heiko.schabert@siemens.com>
vpnc-script

index bc026ab16a73d92c94b2ebd07430716e4754064a..74ccd30a28da0417d060fa87b2623da2c5afe60f 100755 (executable)
@@ -1006,10 +1006,6 @@ do_connect() {
                        fi
                        i=`expr $i + 1`
                done
-               for i in $INTERNAL_IP4_DNS ; do
-                       echo "$i" | grep : >/dev/null || \
-                               set_network_route "$i" "255.255.255.255" "32" "$TUNDEV"
-               done
        elif [ -n "$INTERNAL_IP4_ADDRESS" ]; then
                set_default_route
        fi
@@ -1025,11 +1021,6 @@ do_connect() {
                        fi
                        i=`expr $i + 1`
                done
-               for i in $INTERNAL_IP4_DNS ; do
-                       if echo "$i" | grep : >/dev/null; then
-                               set_ipv6_network_route "$i" "128" "$TUNDEV"
-                       fi
-               done
        elif [ -n "$INTERNAL_IP6_NETMASK" -o -n "$INTERNAL_IP6_ADDRESS" ]; then
                set_ipv6_default_route
        fi
@@ -1055,9 +1046,6 @@ do_disconnect() {
                        fi
                        i=`expr $i + 1`
                done
-               for i in $INTERNAL_IP4_DNS ; do
-                       del_network_route "$i" "255.255.255.255" "32" "$TUNDEV"
-               done
        else
                reset_default_route
        fi
@@ -1096,9 +1084,6 @@ do_disconnect() {
                        fi
                        i=`expr $i + 1`
                done
-               for i in $INTERNAL_IP6_DNS ; do
-                       del_ipv6_network_route "$i" "128" "$TUNDEV"
-               done
        elif [ -n "$INTERNAL_IP6_NETMASK" -o -n "$INTERNAL_IP6_ADDRESS" ]; then
                reset_ipv6_default_route
        fi