From 79c0755674316a058d629f79105f2a1f0c659bac Mon Sep 17 00:00:00 2001 From: coolsnowwolf Date: Mon, 25 May 2020 23:01:48 +0800 Subject: [PATCH] Revert "luci-app-ipsec-vpnd: fix outboud rules with some China android phones" This reverts commit 9206d58b3467fee8a39ae16ef9866bc69388b1bd. --- package/lean/luci-app-ipsec-vpnd/Makefile | 2 +- package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/package/lean/luci-app-ipsec-vpnd/Makefile b/package/lean/luci-app-ipsec-vpnd/Makefile index 450903763..b7a83920f 100644 --- a/package/lean/luci-app-ipsec-vpnd/Makefile +++ b/package/lean/luci-app-ipsec-vpnd/Makefile @@ -9,7 +9,7 @@ LUCI_TITLE:=LuCI support for IPSec VPN Server (IKEv1 with PSK and Xauth) LUCI_DEPENDS:=+strongswan-minimal +strongswan-mod-xauth-generic LUCI_PKGARCH:=all PKG_VERSION:=1.0 -PKG_RELEASE:=8 +PKG_RELEASE:=7 include $(TOPDIR)/feeds/luci/luci.mk diff --git a/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include b/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include index 118fd0e30..5c7108080 100755 --- a/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include +++ b/package/lean/luci-app-ipsec-vpnd/root/etc/ipsec.include @@ -2,12 +2,10 @@ iptables -D FORWARD -m policy --dir in --pol ipsec --proto esp -j ACCEPT 2>/dev iptables -D FORWARD -m policy --dir out --pol ipsec --proto esp -j ACCEPT 2>/dev/null iptables -D INPUT -m policy --dir in --pol ipsec --proto esp -j ACCEPT 2>/dev/null iptables -D OUTPUT -m policy --dir out --pol ipsec --proto esp -j ACCEPT 2>/dev/null -iptables -D FORWARD -p tcp --syn -i ppp+ -j TCPMSS --set-mss 1356 2>/dev/null iptables -I FORWARD -m policy --dir in --pol ipsec --proto esp -j ACCEPT iptables -I FORWARD -m policy --dir out --pol ipsec --proto esp -j ACCEPT iptables -I INPUT -m policy --dir in --pol ipsec --proto esp -j ACCEPT iptables -I OUTPUT -m policy --dir out --pol ipsec --proto esp -j ACCEPT -iptables -I FORWARD -p tcp --syn -i ppp+ -j TCPMSS --set-mss 1356 echo 1 > /proc/sys/net/ipv4/conf/br-lan/proxy_arp