Jean-Philippe Pialasse
df2484857d
- set lzo compression as disabled [SME: 13123] - set default hmac sha256 and ciphers AES-256-GCM [SME: 13115] remove BF-CBC - remove /var/service/openvpn-routed [SME: 12379] - use locatime to log connexions [SME: 13128]
55 lines
1.0 KiB
Plaintext
55 lines
1.0 KiB
Plaintext
# Options
|
|
{
|
|
|
|
my $tunMtu = ${'openvpn-routed'}{Mtu} || '';
|
|
my $fragment = ${'openvpn-routed'}{Fragment} || '';
|
|
my $proto = ${'openvpn-routed'}{Protocol} || 'udp';
|
|
my $duplicate = ${'openvpn-routed'}{DuplicateCN} || 'disabled';
|
|
my $passtos = ${'openvpn-routed'}{PassTOS} || 'enabled';
|
|
my $compress = ${'openvpn-routed'}{Compression} || 'disabled';
|
|
|
|
if ($proto eq 'tcp'){
|
|
$mtuTest = 'disabled';
|
|
$fragment = '';
|
|
}
|
|
|
|
$OUT .=<<"HERE";
|
|
keepalive 40 180
|
|
push "dhcp-option DOMAIN $DomainName"
|
|
push "dhcp-option DNS $LocalIP"
|
|
push "dhcp-option WINS $LocalIP"
|
|
|
|
HERE
|
|
|
|
if ($tunMtu !~ /^\d+$/){
|
|
$OUT .= "mtu-test\n";
|
|
}
|
|
else{
|
|
if ($tunMtu ne ''){
|
|
$OUT .= "tun-mtu $tunMtu\n";
|
|
}
|
|
}
|
|
|
|
if (($proto eq 'udp') && ($fragment =~ /^\d+$/)){
|
|
$OUT .= "fragment $fragment\n";
|
|
}
|
|
$OUT .= "mssfix\n";
|
|
|
|
if ($duplicate eq 'enabled'){
|
|
$OUT .= "duplicate-cn\n";
|
|
}
|
|
|
|
if ($passtos eq 'enabled'){
|
|
$OUT .= "passtos\n";
|
|
}
|
|
|
|
if ($compress eq 'enabled'){
|
|
$OUT .= "comp-lzo adaptive\n";
|
|
$OUT .= "push \"comp-lzo adaptive\"\n";
|
|
}
|
|
|
|
}
|
|
|
|
nice 5
|
|
|