[Openswan Users] Status of NAT-T
Paul Wouters
paul at xelerance.com
Tue Jan 13 19:22:17 EST 2009
On Wed, 14 Jan 2009, David McCullough wrote:
> > ftp://ftp.openswan.org/openswan/testing/nat-t/
>
> Any idea what work it still needed or is it pretty much expected to work ?
It works, but there are some issues:
- Cleanup the #ifdef's (eliminates half the patch)
- Rewrite a hardcoded "ipsec0" to the proper device
- Instead of using code moved in from our "udp.c" nat-t patch,
use the xfrm decap hooks instead - less maintenance in the future
Paul
More information about the Users
mailing list