source address lookup in kernel interface
use it for NAT detection if no source address known from config support for %any...%any connections
This commit is contained in:
@@ -763,7 +763,7 @@ static status_t process_message(private_ike_sa_t *this, message_t *message)
|
||||
}
|
||||
|
||||
/* check if message is trustworthy, and update host information */
|
||||
if (this->state == IKE_CREATED ||
|
||||
if (this->state == IKE_CREATED || this->state == IKE_CONNECTING ||
|
||||
message->get_exchange_type(message) != IKE_SA_INIT)
|
||||
{
|
||||
update_hosts(this, me, other);
|
||||
|
||||
Reference in New Issue
Block a user