From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 15 Feb 2022 15:38:31 +0000 (+0100)
Subject: Merge branch 'natd-fixes'
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3f7d40d3b5de3e7910d2fa00bf6b383f40ac6fa0;p=people%2Fms%2Fstrongswan.git

Merge branch 'natd-fixes'

This adds some modifications to NAT-D in case the source IP can't be
determined before generating NAT-D notifies.  If this happens when using
IPv4, a local NAT is faked (UDP-encap can be disabled later via MOBIKE
if no NAT is actually detected).  If it happens when using IPv6, NAT-T
is disabled completely.

It also removes the old fallbacks for source NAT-D notifies, which were
generally unused but could lead to incorrect results in the above
scenario.

Closes strongswan/strongswan#861
---

3f7d40d3b5de3e7910d2fa00bf6b383f40ac6fa0