[Ipsec-tools-devel] Re: NAT-T, multiple NATed clients

[Emmanuel D. <ma...@ne...>]

On Thu, Apr 21, 2005 at 07:35:58AM +0200, Emmanuel Dreyfus wrote:
> First problem: racoon port floating code confuses a NATed host that
> changes its source port with a second ISAKMP transaction starting from
> another machine behind the same NAT. Yvan suggests comparing i_cookie
> and r_cookie to distinguish the two cases.

It seems I've misunderstood this problem: the phase 1 handle is obtained 
by getph1byindex here, and this already compares cookies. 

The other problem still stands.

-- 
Emmanuel Dreyfus
ma...@ne...