diff options
| author |   Tim Yamin <plasmaroo@gentoo.org> | 2004-04-12 07:00:30 +0000 |
|---|---|---|
| committer | Tim Yamin <plasmaroo@gentoo.org> | 2004-04-12 07:00:30 +0000 |
| commit | 2393672c488e4fa21a92b0684c1bfb328c41ff52 (patch) | |
| tree | fa62c5b893754fa64f4bd4319ced91885bc6e722 /net-firewall/ipsec-tools/files | |
| parent | clean older ebuilds (diff) | |
| download | historical-2393672c488e4fa21a92b0684c1bfb328c41ff52.tar.gz historical-2393672c488e4fa21a92b0684c1bfb328c41ff52.tar.bz2 historical-2393672c488e4fa21a92b0684c1bfb328c41ff52.zip | |
Changed the initialization scripts to flush the tables when racoon is stopped; closes bug #47089.
Diffstat (limited to 'net-firewall/ipsec-tools/files')
| -rw-r--r-- | net-firewall/ipsec-tools/files/racoon.conf.d | 12 | ||||
| -rw-r--r-- | net-firewall/ipsec-tools/files/racoon.init.d | 6 |
2 files changed, 15 insertions, 3 deletions
diff --git a/net-firewall/ipsec-tools/files/racoon.conf.d b/net-firewall/ipsec-tools/files/racoon.conf.d index 8d2f2c3483b1..9ab7b085d60a 100644 --- a/net-firewall/ipsec-tools/files/racoon.conf.d +++ b/net-firewall/ipsec-tools/files/racoon.conf.d @@ -1,13 +1,19 @@ # Copyright 1999-2003 Gentoo Technologies, Inc. # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/files/racoon.conf.d,v 1.1 2003/12/16 18:04:33 plasmaroo Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/files/racoon.conf.d,v 1.2 2004/04/12 07:00:30 plasmaroo Exp $ # Config file for /etc/init.d/racoon -# see man pages for racoon or run `racoon --help` -# for valid cmdline options +# See the manual pages for racoon or run `racoon --help` +# for valid command-line options + RACOON_OPTS="-4" RACOON_CONF="/etc/racoon/racoon.conf" RACOON_PSK_FILE="/etc/racoon/psk.txt" SETKEY_CONF="/etc/ipsec.conf" + +# Comment or remove the following if you don't want the policy tables +# to be flushed when racoon is stopped. + +RACOON_RESET_TABLES="true" diff --git a/net-firewall/ipsec-tools/files/racoon.init.d b/net-firewall/ipsec-tools/files/racoon.init.d index 53ee6d00cbaf..ea0a05eb3320 100644 --- a/net-firewall/ipsec-tools/files/racoon.init.d +++ b/net-firewall/ipsec-tools/files/racoon.init.d @@ -49,4 +49,10 @@ stop() { ebegin "Stopping racoon" kill `cat /var/run/racoon.pid` eend $? + if [ -n "${RACOON_RESET_TABLES}" ]; then + ebegin "Flushing policy entries" + /usr/sbin/setkey -F + /usr/sbin/setkey -FP + eend $? + fi } |