hi,

On Wed, Dec 08, 2004 at 11:35:25AM -0800, Mark Montague wrote:
> A little more information, from looking at the source:
> 
> both versions of vpnc.c in main use the CONFIG_LOCAL_PORT to open
> sockfd, but then under the DEBUG S4.3 the older version, which works,
> sets
> 
> l->u.id.port = 500; /*TODO: get local port */
> 
> while the new one sets
> 
> l->u.id.port = ntohs(local_port);
...
> I changed just the one line back to
> 
> l->u.id.port = 500;
> 
> and compiled the debian version vpnc-0.3.2+SVN20041123 from source,
> and now it works fine. I guess maybe using the local port in a more
> sensible way breaks compatibility with a cisco bug/feature, perhaps?

54 [EMAIL PROTECTED]  l->u.id.port = 500; /* this must be 500, not local_port */

this had been fixed in revision 54 from 2005-05-24

on a related note: cisco-pix (at least before software version 7)
ignored the value in the this field and always used 500, which
breaks the hash of the second packet..

cu
maurice


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to