[Openswan Users] RE: DPD Site behind NAT

Paul Wouters paul at xelerance.com
Thu Aug 10 12:43:20 EDT 2006


On Thu, 10 Aug 2006, Shi Lang wrote:

> You said " With DPD, you might not be doing a DNS lookup for a change dyndns
> host."
>
> You mean openswan can not handle such case when "left""right" use the domain
> name instead of IP. And domain name IP is changed to another, administrator
> should manual configure ipsec.conf?

I said pluto might remember the dns lookup when DPD does the restart. I know it
does NOT remember the lookup when you do ipsec auto --replace. You will have
to test this yourself with DPD.

Paul


More information about the Users mailing list