Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fwknop: Use sensible defaults.

Browse source 
* Change KEY/HMAC_KEY to __CHANGEME__, which is rejected by fwknopd
   during start-up. The value CHANGEME is used only by LuCI package
   luci-app-fwknopd - pull request for generating keys directly from
   LuCI has been created already.
 * Add sensible defaults for ENABLE_IPT_FORWARDING and ENABLE_NAT_DNS,
   which both are/were set by luci-app-fwknopd. Move the defaults here.

Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
This commit is contained in:
Oldřich Jedlička 2020-10-15 17:48:12 +02:00
parent ddcc273f08
commit 53e9a3296a
2 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
net/fwknop/Makefile
View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=fwknop PKG_NAME:=fwknop
PKG_VERSION:=2.6.10 PKG_VERSION:=2.6.10
PKG_RELEASE:=4 PKG_RELEASE:=5
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=https://www.cipherdyne.org/fwknop/download PKG_SOURCE_URL:=https://www.cipherdyne.org/fwknop/download

12
net/fwknop/files/fwknopd
View file

@ -8,10 +8,18 @@ config network
config access config access
option SOURCE 'ANY' option SOURCE 'ANY'
option HMAC_KEY 'CHANGEME' option HMAC_KEY '__CHANGEME__'
option KEY 'CHANGEME' option KEY '__CHANGEME__'
config config config config
# Alternative direct physical interface definition, but untracked - you # Alternative direct physical interface definition, but untracked - you
# are on your own to correctly start/stop the service when needed # are on your own to correctly start/stop the service when needed
# option PCAP_INTF 'eth0' # option PCAP_INTF 'eth0'
# Allow SPA clients to request access to services through an iptables
# firewall instead of just to it (i.e. access through the FWKNOP_FORWARD
# chain instead of the INPUT chain
option ENABLE_IPT_FORWARDING 'Y'
# Allow fwknopd to resolve hostnames in NAT access messages
option ENABLE_NAT_DNS 'Y'