[Ipsec-tools-devel] [PATCH] dpd_invcookie option to work with CISCO PIX

[Asier L. P. <a....@zi...>]

We've found that that ipsec-tools DPD do not work properly with some
CISCO PIX. The problem is that the PIX replies to the message sent by
DPD with the cookies interchanged. When PIX is the initiator, it does
also expect the cookies interchanged. We know that the PIX is not
working properly, but even so, we should like having compatibility with
it.

We've developed a patch that let us configure if the DPD is replying or
expecting cookies interchanged. (It can be patched against 0.6.5 and
0.6.6).

After patching, the file "src/racoon/cfparse.c" should be regenerated
using bison in "src/racoon/cfparse.y".
> bison -o src/racoon/cfparse.c src/racoon/cfparse.y
I've not included it because my version in bison is too new and the
patch is huge.

--=20
Asier Llano Palacios
uSysCom
Dpto. Ingenier=EDa de Desarrollo.

ZIV, Aplicaciones y Tecnolog=EDa.
Parque Tecnol=F3gico, 210
48170 ZAMUDIO (Bizkaia)

E-mail: a....@us...
Tlfno: 944037400=20
=20
----------------------------------------- PLEASE NOTE =
-------------------------------------------
This message, along with any attachments, may be confidential or legally =
privileged.=20
It is intended only for the named person(s), who is/are the only =
authorized recipients.
If this message has reached you in error, kindly destroy it without =
review and notify the sender immediately.
Thank you for your help.
=B5SysCom uses virus scanning software but excludes any liability for =
viruses contained in any attachment.
=20
------------------------------------ ROGAMOS LEA ESTE TEXTO =
-------------------------------
Este mensaje y sus anexos pueden contener informaci=F3n confidencial y/o =
con derecho legal.=20
Est=E1 dirigido =FAnicamente a la/s persona/s o entidad/es rese=F1adas =
como =FAnico destinatario autorizado.
Si este mensaje le hubiera llegado por error, por favor elim=EDnelo sin =
revisarlo ni reenviarlo y notif=EDquelo inmediatamente al remitente. =
Gracias por su colaboraci=F3n. =20
=B5SysCom utiliza software antivirus, pero no se hace responsable de los =
virus contenidos en los ficheros anexos.