Detect AnyConnect clients and allow IPV6 routes to be passed through.

Signed-off-by: Leendert van Doorn <leendert@paramecium.org>
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
This commit is contained in:
Leendert van Doorn
2019-11-14 22:26:20 -06:00
committed by Nikos Mavrogiannopoulos
parent cb138ede03
commit e9b79254e7
3 changed files with 7 additions and 4 deletions

View File

@@ -1973,9 +1973,9 @@ static int connect_handler(worker_st * ws)
if (ws->full_ipv6 == 0) {
req->no_ipv6 = 1;
oclog(ws, LOG_INFO, "IPv6 routes/DNS disabled because IPv6 support was not requested.");
} else if (req->user_agent_type != AGENT_OPENCONNECT) {
} else if (req->user_agent_type != AGENT_OPENCONNECT && req->user_agent_type != AGENT_ANYCONNECT) {
req->no_ipv6 = 1;
oclog(ws, LOG_INFO, "IPv6 routes/DNS disabled because the agent is not openconnect.");
oclog(ws, LOG_INFO, "IPv6 routes/DNS disabled because the agent is not known.");
}
for (i = 0; i < ws->user_config->n_dns; i++) {