GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 08:46:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Disable route and DNS assignment in IPv6 for non-openconnect clients

Browse Source 
That is because anyconnect clients can handle the assignment
of an IPv6 address, but cannot handle routes or DNS in IPv6.
So we disable IPv6 after an IP is assigned.
This commit is contained in:
Nikos Mavrogiannopoulos
2014-12-30 14:14:16 +02:00
parent effc095f46
commit 674a690301
1 changed files with 30 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
src/worker-vpn.c
View File

@@ -1572,10 +1572,21 @@ static int connect_handler(worker_st * ws)
} }
} }
/* While anyconnect clients can handle the assignment
* of an IPv6 address, they cannot handle routes or DNS
* in IPv6. So we disable IPv6 after an IP is assigned. */
if (ws->full_ipv6 == 0 || req->user_agent_type != AGENT_OPENCONNECT)
req->no_ipv6 = 1;
for (i = 0; i < ws->vinfo.dns_size; i++) { for (i = 0; i < ws->vinfo.dns_size; i++) {
if (req->no_ipv6 != 0 && strchr(ws->vinfo.dns[i], ':') != 0) if (strchr(ws->vinfo.dns[i], ':') != 0)
ip6 = 1;
else
ip6 = 0;
if (req->no_ipv6 != 0 && ip6 != 0)
continue; continue;
if (req->no_ipv4 != 0 && strchr(ws->vinfo.dns[i], '.') != 0) if (req->no_ipv4 != 0 && ip6 == 0)
continue; continue;
ret = ret =
@@ -1585,9 +1596,14 @@ static int connect_handler(worker_st * ws)
} }
for (i = 0; i < ws->vinfo.nbns_size; i++) { for (i = 0; i < ws->vinfo.nbns_size; i++) {
if (req->no_ipv6 != 0 && strchr(ws->vinfo.nbns[i], ':') != 0) if (strchr(ws->vinfo.nbns[i], ':') != 0)
ip6 = 1;
else
ip6 = 0;
if (req->no_ipv6 != 0 && ip6 != 0)
continue; continue;
if (req->no_ipv4 != 0 && strchr(ws->vinfo.nbns[i], '.') != 0) if (req->no_ipv4 != 0 && ip6 == 0)
continue; continue;
ret = ret =
@@ -1597,6 +1613,16 @@ static int connect_handler(worker_st * ws)
} }
for (i = 0; i < ws->config->split_dns_size; i++) { for (i = 0; i < ws->config->split_dns_size; i++) {
if (strchr(ws->config->split_dns[i], ':') != 0)
ip6 = 1;
else
ip6 = 0;
if (req->no_ipv6 != 0 && ip6 != 0)
continue;
if (req->no_ipv4 != 0 && ip6 == 0)
continue;
oclog(ws, LOG_DEBUG, "adding split DNS %s", oclog(ws, LOG_DEBUG, "adding split DNS %s",
ws->config->split_dns[i]); ws->config->split_dns[i]);
ret = ret =