[Users] [PATCH] Dynamic left IP without %defaultroute

Hi,

Sometimes you want to start IPsec connections on interfaces that have a dynamic IP address but no defaultroute or the defaultroute is not yet available when pluto starts. The attached patch (on top of FreeS/WAN 2.04+X509 1.5.0) allows to specify left=%dynamic which means you have to specify the local IP Address using ipec auto --left <ip> when adding a connection. This is especially useful in combination with scripts that automatically run after an interface got an IP address (post-up scripts).

To be really useful it would also be necessary to split the ipsec init script into two parts. The first script needs to start pluto without adding connections. It must be run before network interfaces are activated so that the post-up scripts can add connections. The second script then needs to run after network initialization and can add 'classic' connections.

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   SUSE LINUX AG, Development
 V_/_  
http://www.suse.de/

_______________________________________________ FreeS/WAN Users mailing list users@lists.freeswan.org https://mj2.freeswan.org/cgi-bin/mj_wwwusr