From 1fbdab8507fb8b0084fd42ceb03c6f6d8d2d2c59 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Wed, 27 Jun 2007 13:31:16 +0000
Subject: [PATCH] right=%<fqdn> wildcard added

---
 NEWS | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index ac3e1afb4..6c31f50fb 100644
--- a/NEWS
+++ b/NEWS
@@ -23,7 +23,17 @@ strongswan-4.1.4
    right=%any
 
   so that the peer can rekey the connection as an initiator when his
-  IP address changes.
+  IP address changes. An alternative notation is
+
+    right=%peer.foo.bar
+
+  which will implicitly set rightallowany=yes.
+
+- ipsec starter now fails more gracefully in the presence of parsing
+  errors. Flawed ca and conn section are discarded and pluto is started
+  if non-fatal errors only were encountered. If right=%peer.foo.bar
+  cannot be resolved by DNS then right=%any will be used so that passive
+  connections as a responder are still possible.
 
 
 strongswan-4.1.3