<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 25/01/2019 03:23, Paul Wouters
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.LRH.2.21.1901242220560.5596@bofh.nohats.ca">
<br>
On Thu, 24 Jan 2019, Nick Howitt wrote:
<br>
<br>
<blockquote type="cite">
<blockquote type="cite">
<br>
It changes things slightly. If you are on dynamic IP but your
machine
<br>
does have its DNS name updated when its IP address changes,
then you
<br>
can use right=@DNSNAME and left=@DNSNAME and when the
connection fails
<br>
(eg you enable DPD) then the DNS name will be looked up
fresh. So in
<br>
that case, both ends can have auto=start and you can run
ipsec auto --up
<br>
but you will not be using "%any" in that case.
<br>
</blockquote>
Hi Paul,
<br>
This is good news to me (@DNSNAME), but where is this usage of
left/right documented? I don't see it in man ipsec.conf.
<br>
</blockquote>
<br>
I've added a note to the "left" section of the man page. Thanks
for
<br>
pointing out this information was missing.
<br>
<br>
</blockquote>
Thanks. Presumably that is in your dev branch? I had a look on the
website and it has not changed yet.<br>
<br>
O/T<br>
While there, I noticed the button linking to the source tarball on
<a class="moz-txt-link-freetext" href="https://libreswan.org/man/">https://libreswan.org/man/</a> pointed to
<a class="moz-txt-link-freetext" href="https://download.libreswan.org/libreswan-3.23.tar.gz">https://download.libreswan.org/libreswan-3.23.tar.gz</a> whereas the one
on <a class="moz-txt-link-freetext" href="https://libreswan.org/">https://libreswan.org/</a> points to
<a class="moz-txt-link-freetext" href="https://download.libreswan.org/libreswan-3.27.tar.gz">https://download.libreswan.org/libreswan-3.27.tar.gz</a><br>
<br>
Nick<br>
</body>
</html>