Mailing List Archive

Author: Antonio Borneo
Date: Sun Dec 1 11:20:19 2013
New Revision: 533

Log:
Split DNS

In AnyConnect the server seems to offer an X-CSTP-Split-DNS: header,
which can appear multiple times, with search domains for the client to
use. I'm exporting these in $CISCO_SPLIT_DNS, space-separated.
(A. Borneo: in recent openconnect it is now comma-separated)

I see that there's an ISAKMP_MODECFG_ATTRIB_CISCO_SPLIT_DNS, but we
don't seem to *do* anything with it. Like the IPv6 attributes which we
also ignore, just make vpnc clear the environment variable.

We really ought to make vpnc *support* these, given that we know how to
recognise them. But that's left as an exercise for someone who actually
has access to a server.

A. Borneo:
This patch completes Evan Broder's one.

Author: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Antonio Borneo <borneo.antonio@gmail.com>

Modified:
branches/vpnc-nortel/vpnc.c
trunk/vpnc.c

Modified: branches/vpnc-nortel/vpnc.c
==============================================================================
--- branches/vpnc-nortel/vpnc.c (original)
+++ branches/vpnc-nortel/vpnc.c Sun Dec 1 11:20:19 2013
@@ -963,6 +963,7 @@

unsetenv("CISCO_BANNER");
unsetenv("CISCO_DEF_DOMAIN");
+ unsetenv("CISCO_SPLIT_DNS");
unsetenv("CISCO_SPLIT_INC");
unsetenv("CISCO_IPV6_SPLIT_INC");
unsetenv("INTERNAL_IP4_NBNS");

Modified: trunk/vpnc.c
==============================================================================
--- trunk/vpnc.c (original)
+++ trunk/vpnc.c Sun Dec 1 11:20:19 2013
@@ -941,6 +941,7 @@

unsetenv("CISCO_BANNER");
unsetenv("CISCO_DEF_DOMAIN");
+ unsetenv("CISCO_SPLIT_DNS");
unsetenv("CISCO_SPLIT_INC");
unsetenv("CISCO_IPV6_SPLIT_INC");
unsetenv("INTERNAL_IP4_NBNS");

_______________________________________________
vpnc-devel mailing list
vpnc-devel@unix-ag.uni-kl.de
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/