ear all,
I'm using monowall for a couple of VPN connections since years now. From time to time some of my tunnels are getting out of sync (they using dynamic IP Addresses) for a unknown reason.
If this happened I restart the whole IPSEC System via manual execution of the /etc/rc.newipsecdns script on the exec.php hidden formula. That worked so far, but now I decide to script this because I'm tired of getting phone calls in the middle of the night because a tunnel stops working ;-). Unfortunately a call of /etc/rc.newipsecdns vi the exec_raw formula results in a kind of loop, rc.newipsecdns seems to call them self again and again, which causes the whole box to crash..
I know this all is a bit tricky and the exec functions are unsupported but maybe one could give me a hint a.) why is the behaviour so different in exec.php and exec_raw.php? b.) is there any other, better way to restart ipsec after a dns change?
Thanks in advance!!
Dirk
|