New commits:
commit cc045076885ee1f7eab1ac8fbb9c88187961bc01
Author: Andrew Cagney <[email protected]>
Date: Wed Jun 24 22:19:01 2020 -0400
nat: when only one {left,right}ikeport, default other end to 4500 and not
500
For {left,right}ikeport to work wth NAT it must enable espinudp,
and that means all incomming messages on that port must include
the ESP=0 prefix, and that means anything but port 500 (because
an exchange with port 500 never has ESP=0 prefix added).
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit