[strongSwan] Resolve plugin doesn't restore /etc/resolv.conf

Noel Kuntze noel at familie-kuntze.de
Thu Aug 14 11:06:06 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Martin,

Yes, I tried that. However, if I do that,
/etc/resolv.conf only contains the comment in the first line.

Regards,
Noel Kuntze

GPG Key id: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 14.08.2014 um 10:58 schrieb Martin Willi:
> Noel,
> 
>> upon disconnecting the tunnel (swanctl -t --child tunnel) the content
>> of /etc/resolv.conf isn't restored to the content there was before.
> 
> With that command, usually only the CHILD_SA gets closed, but not the
> IKE_SA. IP address, DNS configuration and other attributes are bound to
> the lifetime of the IKE_SA in IKEv2, and not to the CHILD_SA.
> 
> Have you tried to terminate the connection with the --ike option?
> 
> Regards
> Martin
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=dFyd
-----END PGP SIGNATURE-----


More information about the Users mailing list