Ede_Vau
/
routeros-scripts
mirror of https://github.com/eworm-de/routeros-scripts
1
0
Fork 0
Code Issues Releases Wiki Activity

ipsec-to-dns: handle "CN=" from peer's id 

This was missing in commit bff6689b10 and
cause the dns entry to be delete and re-created over and over again.
This commit is contained in:
Christian Hesse 2023-01-17 12:34:05 +01:00
parent 23e5c01a42
commit 03fb459ea4
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ipsec-to-dns
View File

@ -16,8 +16,9 @@
:global PrefixInZone;
:global CharacterReplace;
:global LogPrintExit2;
:global EscapeForRegEx;
:global IfThenElse;
:global LogPrintExit2;
:local Zone \
([ $IfThenElse ($PrefixInZone = true) "ipsec." ] . \
@ -35,7 +36,8 @@
:foreach DnsRecord in=[ /ip/dns/static/find where comment ~ $CommentPrefix ] do={
:local DnsRecordVal [ /ip/dns/static/get $DnsRecord ];
:local PeerId [ $CharacterReplace ($DnsRecordVal->"comment") $CommentPrefix "" ];
:if ([ :len [ /ip/ipsec/active-peers/find where id=$PeerId dynamic-address=($DnsRecordVal->"address") ] ] > 0) do={
:if ([ :len [ /ip/ipsec/active-peers/find where id~("^(CN=)?" . [ $EscapeForRegEx $PeerId ] . "\$") \
dynamic-address=($DnsRecordVal->"address") ] ] > 0) do={
$LogPrintExit2 debug $0 ("Peer " . $PeerId . " (" . $DnsRecordVal->"name" . ") still exists. Not deleting DNS entry.") false;
} else={
:local Found false;