[Swan-dev] for DNS, try IPv4 before IPv6

Paul Wouters paul at nohats.ca
Tue Jan 5 02:21:31 UTC 2021

On Jan 4, 2021, at 20:14, Andrew Cagney <andrew.cagney at gmail.com> wrote:

> So to put it simply: whack prefers IPv4; ttoaddr() prefers IPv6.  This
> means that, if the whack default is removed, a configuration with
> valid IPv4 and IPv6 DNS records would suddenly switch from IPv4 to
> IPv6 for the IKE SA.

That’s fine with me. A CHANGES entry pointing to this change would be enough. Maybe add a man page entry for IPsec.conf explaining behaviour of right=dnsname


More information about the Swan-dev mailing list