mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-02-10 16:57:00 +08:00
doc: document the behavior of restrict-user-to-routes in case of defaultroute
This commit is contained in:
@@ -468,9 +468,9 @@ no-route = 192.168.5.0/255.255.255.0
|
|||||||
|
|
||||||
# If set, the script /usr/bin/ocserv-fw will be called to restrict
|
# If set, the script /usr/bin/ocserv-fw will be called to restrict
|
||||||
# the user to its allowed routes and prevent him from accessing
|
# the user to its allowed routes and prevent him from accessing
|
||||||
# any other routes. All the routes applied by ocserv can be reverted
|
# any other routes. In case of defaultroute, the no-routes are restricted.
|
||||||
# using /usr/bin/ocserv-fw --removeall. This option can be set globally
|
# All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
|
||||||
# or in the per-user configuration.
|
# --removeall. This option can be set globally or in the per-user configuration.
|
||||||
#restrict-user-to-routes = true
|
#restrict-user-to-routes = true
|
||||||
|
|
||||||
# When set to true, all client's iroutes are made visible to all
|
# When set to true, all client's iroutes are made visible to all
|
||||||
|
|||||||
@@ -556,9 +556,9 @@ no-route = 192.168.5.0/255.255.255.0
|
|||||||
|
|
||||||
# If set, the script /usr/bin/ocserv-fw will be called to restrict
|
# If set, the script /usr/bin/ocserv-fw will be called to restrict
|
||||||
# the user to its allowed routes and prevent him from accessing
|
# the user to its allowed routes and prevent him from accessing
|
||||||
# any other routes. All the routes applied by ocserv can be reverted
|
# any other routes. In case of defaultroute, the no-routes are restricted.
|
||||||
# using /usr/bin/ocserv-fw --removeall. This option can be set globally
|
# All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
|
||||||
# or in the per-user configuration.
|
# --removeall. This option can be set globally or in the per-user configuration.
|
||||||
#restrict-user-to-routes = true
|
#restrict-user-to-routes = true
|
||||||
|
|
||||||
# When set to true, all client's iroutes are made visible to all
|
# When set to true, all client's iroutes are made visible to all
|
||||||
|
|||||||
Reference in New Issue
Block a user