From 1444ddae645e1206190da7319a00413ffafd222b Mon Sep 17 00:00:00 2001 From: Timo Teras Date: Thu, 20 Aug 2009 16:56:16 +0300 Subject: main/ipsec-tools: bump up to 20080820 snapshot remove patches merged upstream, minor fix to reverse-connect patch and add new "phase1 hints when rekeying" patch to help rekeying in some nat scenarios. --- main/ipsec-tools/50-reverse-connect.patch | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'main/ipsec-tools/50-reverse-connect.patch') diff --git a/main/ipsec-tools/50-reverse-connect.patch b/main/ipsec-tools/50-reverse-connect.patch index c49eae347..f29c3d509 100644 --- a/main/ipsec-tools/50-reverse-connect.patch +++ b/main/ipsec-tools/50-reverse-connect.patch @@ -125,9 +125,9 @@ index b33986f..9fd3817 100644 + * to firewall or nat */ + if (iph1->side == RESPONDER && p->side == INITIATOR && + p->status < PHASE1ST_MSG3RECEIVED) { ++ /* Do not delete ph1, since if the node is not NATted, ++ * and we delete it we might get phase2's lost */ + evt_list_move(&p->evt_listeners, &iph1->evt_listeners); -+ remph1(p); -+ delph1(p); + } } } -- cgit v1.2.3