hi, On Wed, Dec 08, 2004 at 11:35:25AM -0800, Mark Montague wrote: > A little more information, from looking at the source: > > both versions of vpnc.c in main use the CONFIG_LOCAL_PORT to open > sockfd, but then under the DEBUG S4.3 the older version, which works, > sets > > l->u.id.port = 500; /*TODO: get local port */ > > while the new one sets > > l->u.id.port = ntohs(local_port); ... > I changed just the one line back to > > l->u.id.port = 500; > > and compiled the debian version vpnc-0.3.2+SVN20041123 from source, > and now it works fine. I guess maybe using the local port in a more > sensible way breaks compatibility with a cisco bug/feature, perhaps?
54 [EMAIL PROTECTED] l->u.id.port = 500; /* this must be 500, not local_port */ this had been fixed in revision 54 from 2005-05-24 on a related note: cisco-pix (at least before software version 7) ignored the value in the this field and always used 500, which breaks the hash of the second packet.. cu maurice -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]