[Swan] (no subject)

Matthew Johnson matthew.f.j at gmail.com
Mon Sep 10 20:02:05 UTC 2018


Hello,

I'm running:
Linux Libreswan 3.15 (netkey) on 2.6.32-754.2.1.el6.x86_64

Updating is not an option...

My clients are behind a NAT, which is changing the source port from 500 to
something random and high. The server receives the packet, but the reply
does not honor the source port, and instead replaces the random high port
number with 500.

The client's NAT, doesn't know what to do with a reply to port 500, so
drops the packets.

How can I configure the server to honor the source port?

Best regards,

Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180910/1c9426ea/attachment.html>


More information about the Swan mailing list