security/openconnect: ignore DNS information #3090

This commit is contained in:
Franco Fichtner
2023-02-01 10:36:39 +01:00
parent 5c901f1e83
commit c77dd94ad4
2 changed files with 10 additions and 1 deletions
@@ -0,0 +1,8 @@
#!/bin/sh
# do not pass DNS information that clobbers /etc/resolv.conf
export INTERNAL_IP4_DNS=
. /usr/local/sbin/vpnc-script
# XXX we can register the proper DNS via ifctl(8) if required later
@@ -1,9 +1,10 @@
{% if helpers.exists('OPNsense.openconnect.general.enabled') and OPNsense.openconnect.general.enabled == '1' %}
openconnect_enable="YES"
openconnect_flags="-s /usr/local/opnsense/scripts/OPNsense/Openconnect/vpnc.sh"
{% if helpers.exists('OPNsense.openconnect.general.server') and OPNsense.openconnect.general.server != '' %}
{% if helpers.exists('OPNsense.openconnect.general.user') and OPNsense.openconnect.general.user != '' %}
{% if helpers.exists('OPNsense.openconnect.general.password') and OPNsense.openconnect.general.password != '' %}
openconnect_flags="--config=/usr/local/etc/openconnect.conf {{ OPNsense.openconnect.general.server }}"
openconnect_flags="${openconnect_flags} --config=/usr/local/etc/openconnect.conf {{ OPNsense.openconnect.general.server }}"
{% endif %}
{% endif %}
{% endif %}