CVSROOT: /cvs Module name: src Changes by: mart...@cvs.openbsd.org 2010/12/09 05:46:11
Modified files:
sbin/isakmpd : sa.c
Log message:
When looking up an SA based on peer address, also check the port
number. Without this, isakmpd deletes SAs from the same IP on an
INITIAL-CONTACT message, possibly deleting unrelated NATed tunnels.
Fixes PR 5562. Verified by Mikolaj Kucharski.
ok mikeb@
