Re: [Ipsec-tools-devel] [PATCH] Bug in HEAD with NATT?

[<ma...@ne...>]

Ludo Stellingwerff <lu...@pr...> wrote:

> Sorry, I mixed up the patch, it was reversed. Herewith the correct one.

Ok, that makes more sense.
=20
> The portcheck is missing in "isakmp_chkph1there" and should be
> added, making this function identical to the code in
> "isakmp_post_acquire".

I'm concerned about NAT-T with multiple peers behind the NAT. Is
getph1byaddrwop() fine? Shouldn't getph1byaddr() be used instead?=20

--=20
Emmanuel Dreyfus
Un bouquin en fran=E7ais sur BSD:
http://www.eyrolles.com/Informatique/Livre/9782212114638/livre-bsd.php
ma...@ne...