On Fri, 22 May 2020 14:00:54 -0400 (EDT) Paul Wouters <[email protected]> wrote:
> > ip: add .any_port to ip_protoport, seems tcp/0 and tcp/%any are > > subtly different > > Warning. A connection containing %any (i think even in protoports=) > become a template and therefor cannot initiate. That's a limit in > our implementation. I think most of the tcp/0 is really a tcp/%any but > we need to be able to initiate" workaround. tcp/%any means any single port proposed by remote. tcp/0 is tcp/all ports. Most cases of tcp/0 do not work at all and do not mean tcp/%any. Or did I understand what you said wrong? -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/> _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
