From d5bd77512637cf0be88ceea8fc1699e8655cd718 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 Sep 2010 11:31:01 +0200 Subject: [PATCH] Do not update remote host if we are behind a NAT. --- src/libcharon/sa/ike_sa.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/src/libcharon/sa/ike_sa.c b/src/libcharon/sa/ike_sa.c index 9eb18c336..a5dd19952 100644 --- a/src/libcharon/sa/ike_sa.c +++ b/src/libcharon/sa/ike_sa.c @@ -857,10 +857,8 @@ METHOD(ike_sa_t, update_hosts, void, if (!other->equals(other, this->other_host)) { - /* update others adress if we are NOT NATed, - * and allow port changes if we are NATed */ - if (!has_condition(this, COND_NAT_HERE) || - other->ip_equals(other, this->other_host)) + /* update others adress if we are NOT NATed */ + if (!has_condition(this, COND_NAT_HERE)) { set_other_host(this, other->clone(other)); update = TRUE;