[Openswan dev] why pluto adds the leftsourceip to the ipsec device?

Paul Wouters paul at xelerance.com
Wed Feb 9 21:41:28 EST 2011


On Tue, 8 Feb 2011, Roel van Meer wrote:

The sourceip= code changed to use the proper /32 now. It should be in 2.6.33.

There are two places where this is used, AFAIK

1) to ensure proper routing for the remote host/subnet using the internal ip
    (see man ipsec.conf entry on leftsourceip)

2) Added XAUTH obtained IP addresses routing

Paul


More information about the Dev mailing list