<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:΢ÈíÑźÚ
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div><div dir="ltr"><div><div>Hi All:</div><div><br></div><div>Based on example of /etc/ipsec.d/v6neighbor-hole.conf , the traffic of "ICMPv6 Neighbor Solicitation" or "ICMPv6 Neighbor Solicitation" in encrypted. <b>Right</b> ? </div><div><br></div><div>So I think "leftprotoport=17/0" means all UDP traffic is NOT protected by IPSec. <b>Right</b>? </div><div><br></div><div>But my colleague thinks "leftprotoport=17/0" as:</div><div>===========================================</div><div>if the protocol is UDP send it through the channel</div><div>which means encrypt and send then other party receives and decrypts</div><div>if the protocol is not UDP then cannot use the tunnel</div><div>so it works as it is designed</div><div><br></div><div>Is it correct ???</div><div><br></div><div>Thanks and regards</div><div><br></div><div>Hao Chen</div></div><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> <br></span> </div>
<br>_______________________________________________
Swan mailing list
Swan@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan</div><style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:΢ÈíÑźÚ;
}
--></style> </div></body>
</html>