[Openswan Users] Status of NAT-T

Paul Wouters paul at xelerance.com
Tue Jan 13 19:22:17 EST 2009


On Wed, 14 Jan 2009, David McCullough wrote:

> > ftp://ftp.openswan.org/openswan/testing/nat-t/
> 
> Any idea what work it still needed or is it pretty much expected to work ?

It works, but there are some issues:

- Cleanup the #ifdef's (eliminates half the patch)
- Rewrite a hardcoded "ipsec0" to the proper device
- Instead of using code moved in from our "udp.c" nat-t patch,
  use the xfrm decap hooks instead - less maintenance in the future

Paul


More information about the Users mailing list