Hey Paul,

Sorry I never got back to you. Unfortunately the VMs I had been testing on were 
wiped out, so I'm not sure I can be that great of a help anymore.

Regards,
Matt

________________________________
From: Paul Wouters <[email protected]>
Sent: Tuesday, August 23, 2016 12:22:56 PM
To: Schmidt, Michael M
Cc: Libreswan Development List
Subject: Re: [Swan] Multiple clients behind the same NAT IP get dropped - IPSec 
/ xauth

On Tue, 28 Jun 2016, Schmidt, Michael M wrote:

> I can run a debug if you tell me what debug level to run on and what version 
> you want me to test with.

Antony located a bug that I think might have caused this problem.
Try this small patch:

diff --git a/programs/pluto/connections.c b/programs/pluto/connections.c
index 7a5b1a2..bcb73a7 100644
--- a/programs/pluto/connections.c
+++ b/programs/pluto/connections.c
@@ -1819,6 +1821,9 @@ char *add_group_instance(struct connection *group, const 
i p_subnet *target)

                 t->spd.reqid = group->spd.reqid == 0 ?
                         gen_reqid() : group->spd.reqid;
+               t->spd.reqid =  gen_reqid();
+
+

                 /* add to connections list */
                 t->ac_next = connections;

Paul
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev

Reply via email to