<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Paul,<br>
Do you know when this feature was added? It does not appear to be in
3.23-5.el7_5. I am getting:<br>
<br>
[root@ad-dc-server ~]# ipsec auto --replace nick-ikev2<br>
002 "nick-ikev2": deleting non-instance connection<br>
000 failed to convert '@howitts.co.uk' at load time: illegal
(non-DNS-name) character in name<br>
002 added connection description "nick-ikev2"<br>
<br>
Thanks<br>
<br>
Nick<br>
<br>
<div class="moz-cite-prefix">On 25/01/2019 08:20, Nick Howitt wrote:<br>
</div>
<blockquote type="cite"
cite="mid:9254e618-2326-a6ef-39a4-cf130da5937d@howitts.co.uk">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<br>
<br>
<div class="moz-cite-prefix">On 25/01/2019 03:23, Paul Wouters
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.LRH.2.21.1901242220560.5596@bofh.nohats.ca"> <br>
On Thu, 24 Jan 2019, Nick Howitt wrote: <br>
<br>
<blockquote type="cite">
<blockquote type="cite"> <br>
It changes things slightly. If you are on dynamic IP but
your machine <br>
does have its DNS name updated when its IP address changes,
then you <br>
can use right=@DNSNAME and left=@DNSNAME and when the
connection fails <br>
(eg you enable DPD) then the DNS name will be looked up
fresh. So in <br>
that case, both ends can have auto=start and you can run
ipsec auto --up <br>
but you will not be using "%any" in that case. <br>
</blockquote>
Hi Paul, <br>
This is good news to me (@DNSNAME), but where is this usage of
left/right documented? I don't see it in man ipsec.conf. <br>
</blockquote>
<br>
I've added a note to the "left" section of the man page. Thanks
for <br>
pointing out this information was missing. <br>
<br>
</blockquote>
Thanks. Presumably that is in your dev branch? I had a look on the
website and it has not changed yet.<br>
<br>
O/T<br>
While there, I noticed the button linking to the source tarball on
<a class="moz-txt-link-freetext" href="https://libreswan.org/man/"
moz-do-not-send="true">https://libreswan.org/man/</a> pointed to
<a class="moz-txt-link-freetext"
href="https://download.libreswan.org/libreswan-3.23.tar.gz"
moz-do-not-send="true">https://download.libreswan.org/libreswan-3.23.tar.gz</a>
whereas the one on <a class="moz-txt-link-freetext"
href="https://libreswan.org/" moz-do-not-send="true">https://libreswan.org/</a>
points to <a class="moz-txt-link-freetext"
href="https://download.libreswan.org/libreswan-3.27.tar.gz"
moz-do-not-send="true">https://download.libreswan.org/libreswan-3.27.tar.gz</a><br>
<br>
Nick<br>
</blockquote>
<br>
</body>
</html>