diff options
| author | Chris Buechler <cmb@pfsense.org> | 2014-11-06 12:49:06 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2014-11-06 12:49:06 -0600 |
| commit | dbb95f387bb1b904bd9fcb5350acff5ff7e02948 (patch) | |
| tree | a2d81b3ffce50886199b2884b5f71bdf0cb01a46 /etc/inc/vpn.inc | |
| parent | 27c2e32e28f871adf036b666e8e3ae1bf54ea7a2 (diff) | |
| download | pfsense-dbb95f387bb1b904bd9fcb5350acff5ff7e02948.zip pfsense-dbb95f387bb1b904bd9fcb5350acff5ff7e02948.tar.gz | |
set install_routes=no for charon to avoid the issues noted in ticket
Diffstat (limited to 'etc/inc/vpn.inc')
| -rw-r--r-- | etc/inc/vpn.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index d13e02a..55ed803 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -288,7 +288,8 @@ charon { threads = 16 ikesa_table_size = 32 ikesa_table_segments = 4 - init_limit_half_open = 1000; + init_limit_half_open = 1000 + install_routes = no # XXX: There is not much choice here really users win their security! i_dont_care_about_security_and_use_aggressive_mode_psk=yes |
