]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
Do not update remote host if we are behind a NAT.
authorTobias Brunner <tobias@strongswan.org>
Tue, 7 Sep 2010 09:31:01 +0000 (11:31 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 12 Oct 2010 09:11:04 +0000 (11:11 +0200)
src/libcharon/sa/ike_sa.c

index 9eb18c33626b71cbeca0e35b72bbd0e12518a89c..a5dd19952450a35772a774a7247bf53b19de9634 100644 (file)
@@ -857,10 +857,8 @@ METHOD(ike_sa_t, update_hosts, void,
 
                if (!other->equals(other, this->other_host))
                {
-                       /* update others adress if we are NOT NATed,
-                        * and allow port changes if we are NATed */
-                       if (!has_condition(this, COND_NAT_HERE) ||
-                               other->ip_equals(other, this->other_host))
+                       /* update others adress if we are NOT NATed */
+                       if (!has_condition(this, COND_NAT_HERE))
                        {
                                set_other_host(this, other->clone(other));
                                update = TRUE;