[Openswan dev] "NAT-Traversal: Result using 3"

Paul Wouters paul at xelerance.com
Mon Nov 13 12:11:32 EST 2006


On Fri, 10 Nov 2006, Jacco de Leeuw wrote:

> > ~  NAT-Traversal: Result using 3: peer is NATed
>
> That patch was incomplete. The reported NAT-T method was incorrect
> when Openswan was the responder. It's mostly a cosmetic problem
> because the correct method was still used.
>
> I guess it's a good idea to maintain the order of NAT-T methods
> consistently, including in nat_traversal_show_result() in
> nat_traversal.c. See the patch below. The reported method
> in ipsec_doi.c was one off, so I inserted a shift right.

Applied. Though I am not entirely sure the shiftt is the proper solution.
Michael might want to fix that differently when porting this upwards.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Dev mailing list