On Sun, 24 May 2020, Andrew Cagney wrote:

There are two things kicking around - what range of ports is
acceptable and what is allowed when there isn't an exact match.

%any - narrow to single port in range 0-65536 so a single port is ok,
but anything else gets chopped to something random
0 - don't narrow, must be 0-65535?
%narrow - 0-65535 but can be less?

presumably addresses have the same problem.

There is no "any one IP address" equivalent.

I guess we should really change that %any to be %one

(because %anyone would be confusing :)

Paul
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev

Reply via email to