os-mnemo/pan-globalprotect-okta
1
0
Fork 0
mirror of https://github.com/os-mnemo/pan-globalprotect-okta synced 2026-07-31 07:44:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add a way to mark insecure zones.

Browse Source
This commit is contained in:
Andris Raugulis
2018-04-11 12:55:54 +03:00
parent 1856ec11a4
commit fac7013918
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
vpnc-script-wrapper.sh
+10 -2
View File
@@ -2,12 +2,14 @@
_VPNC_SCRIPT="/usr/local/sbin/vpnc-script" _VPNC_SCRIPT="/usr/local/sbin/vpnc-script"
# addr/mask/masklen
_ROUTES=" _ROUTES="
10.0.0.0/255.0.0.0/8 10.0.0.0/255.0.0.0/8
192.168.0.0/255.255.0.0/16 192.168.0.0/255.255.0.0/16
" "
# zone [insecure]
_DOMAINS=" _DOMAINS="
example.com example.com 0
" "
OIFS=$IFS; NLIFS=' OIFS=$IFS; NLIFS='
@@ -76,12 +78,18 @@ adjust_dns()
_unbound=$(_get_unbound) || { echo "err: unbound not found" >&2 && exit 1; } _unbound=$(_get_unbound) || { echo "err: unbound not found" >&2 && exit 1; }
IFS=$NLIFS IFS=$NLIFS
for _line in ${_DOMAINS}; do for _line in ${_DOMAINS}; do
_split "${_line}" ' ' _domain _ _split "${_line}" ' ' _domain _insecure _
if [ X"${reason}" = X"connect" ]; then if [ X"${reason}" = X"connect" ]; then
if [ X"${_insecure}" = X"1" ]; then
${_unbound} insecure_add "${_domain}"
fi
${_unbound} forward_add +i "${_domain}" "${_dns}" ${_unbound} forward_add +i "${_domain}" "${_dns}"
${_unbound} flush_requestlist ${_unbound} flush_requestlist
${_unbound} flush_zone "${_domain}" ${_unbound} flush_zone "${_domain}"
elif [ X"${reason}" = X"disconnect" ]; then elif [ X"${reason}" = X"disconnect" ]; then
if [ X"${_insecure}" = X"1" ]; then
${_unbound} insecure_remove "${_domain}"
fi
${_unbound} forward_remove +i "${_domain}" ${_unbound} forward_remove +i "${_domain}"
${_unbound} flush_zone "${_domain}" ${_unbound} flush_zone "${_domain}"
${_unbound} flush_requestlist ${_unbound} flush_requestlist