[Openswan Users] kernel patch NAT TRAVERSAL

vpn vpn at henryg.net
Mon Apr 7 23:13:44 EDT 2008


That's it, that code is not in net/ipv4/udp.c, the closest match is
      case 0:
      case UDP_ENCAP_ESPINUDP:
      case UDP_ENCAP_ESPINUDP_NON_IKE:
         up->encap_type = val;
         break;
      default:
         err = -ENOPROTOOPT;
         break;
      }
      break;


Paul Wouters wrote:
> On Mon, 7 Apr 2008, vpn wrote:
>
>   
>> Thanks Julien, This is the contents of net/ipv4/udp.c.rej
>> ***************
>> *** 1349,1354 ****
>>     case 0:
>>     case UDP_ENCAP_ESPINUDP:
>>     case UDP_ENCAP_ESPINUDP_NON_IKE:
>>        up->encap_rcv = xfrm4_udp_encap_rcv;
>>        /* FALLTHROUGH */
>>     case UDP_ENCAP_L2TPINUDP:
>> --- 1472,1482 ----
>>     case 0:
>>     case UDP_ENCAP_ESPINUDP:
>>     case UDP_ENCAP_ESPINUDP_NON_IKE:
>> + #if defined(CONFIG_XFRM) || defined(CONFIG_IPSEC_NAT_TRAVERSAL)
>> +        if (xfrm4_rcv_encap_func)
>> +           up->encap_rcv = xfrm4_udp_encap_rcv_wrapper;
>> +        else
>> + #endif
>>        up->encap_rcv = xfrm4_udp_encap_rcv;
>>        /* FALLTHROUGH */
>>     case UDP_ENCAP_L2TPINUDP:
>>     
>
> So find that code above the " --- 1472,1482 ----" in your udp.c, and
> manually change it to have those extra lines starting with "+" in it
> from below the " --- 1472,1482 ----" marker.
>
> Paul
>
>
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20080407/720ba201/attachment-0001.html 


More information about the Users mailing list