]> git.ipfire.org Git - thirdparty/strongswan.git/commit
projects / thirdparty / strongswan.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f8a565f) | patch
ike: Do remote address updates also when behind static NATs
authorTobias Brunner <tobias@strongswan.org>
Fri, 10 Oct 2014 10:55:39 +0000 (12:55 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 13 Oct 2014 13:20:17 +0000 (15:20 +0200)
commit472156eea5ce67d9769ed2f3f9ff24e48460d4e9
treefc0c06382df34fafcbc4d3325de56bd4e31b024etree
parentf8a565fbccbe077583f556d2148041d3b1de5580commit | diff
ike: Do remote address updates also when behind static NATs

We assume that a responder is behind a static NAT (e.g. port forwarding)
and allow remote address updates in such situations.

The problem described in RFC 5996 is only an issue if the NAT mapping
can expire.
src/libcharon/sa/ike_sa.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.