mirror of
https://github.com/novatiq/packages.git
synced 2026-04-30 07:28:39 +01:00
Merge pull request #13678 from oldium/update-fwknopd-defaults
fwknop: Use sensible defaults.
This commit is contained in:
+1
-1
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
|
|||||||
|
|
||||||
PKG_NAME:=fwknop
|
PKG_NAME:=fwknop
|
||||||
PKG_VERSION:=2.6.10
|
PKG_VERSION:=2.6.10
|
||||||
PKG_RELEASE:=4
|
PKG_RELEASE:=5
|
||||||
|
|
||||||
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
|
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
|
||||||
PKG_SOURCE_URL:=https://www.cipherdyne.org/fwknop/download
|
PKG_SOURCE_URL:=https://www.cipherdyne.org/fwknop/download
|
||||||
|
|||||||
@@ -8,10 +8,18 @@ config network
|
|||||||
|
|
||||||
config access
|
config access
|
||||||
option SOURCE 'ANY'
|
option SOURCE 'ANY'
|
||||||
option HMAC_KEY 'CHANGEME'
|
option HMAC_KEY '__CHANGEME__'
|
||||||
option KEY 'CHANGEME'
|
option KEY '__CHANGEME__'
|
||||||
|
|
||||||
config config
|
config config
|
||||||
# Alternative direct physical interface definition, but untracked - you
|
# Alternative direct physical interface definition, but untracked - you
|
||||||
# are on your own to correctly start/stop the service when needed
|
# are on your own to correctly start/stop the service when needed
|
||||||
# option PCAP_INTF 'eth0'
|
# option PCAP_INTF 'eth0'
|
||||||
|
|
||||||
|
# Allow SPA clients to request access to services through an iptables
|
||||||
|
# firewall instead of just to it (i.e. access through the FWKNOP_FORWARD
|
||||||
|
# chain instead of the INPUT chain
|
||||||
|
option ENABLE_IPT_FORWARDING 'Y'
|
||||||
|
|
||||||
|
# Allow fwknopd to resolve hostnames in NAT access messages
|
||||||
|
option ENABLE_NAT_DNS 'Y'
|
||||||
|
|||||||
Reference in New Issue
Block a user