Re: [strongSwan] Stronswan to ignore IKE-SA-INIT response from a bogus IPv6 address

[Tobias Brunner]

Hi Rajeev,

> Is there way to Stronswan to ignore IKE-SA-INIT response from a bogus
> IPv6 address? Strongswan replies to all the IKE-SA-INIT receive from all
> IP addresses. 

Use iptables.

Regards,
Tobias