Re: CVS commit: src/sys/netipsec

[christos%zoulas.com@localhost (Christos Zoulas)]

On Mar 7,  7:36pm, jarle%uninett.no@localhost (Jarle Greipsland) wrote:
-- Subject: Re: CVS commit: src/sys/netipsec

| "Christos Zoulas" <christos%netbsd.org@localhost> writes:
| > Module Name:	src
| > Committed By:	christos
| > Date:		Sat Mar  5 20:13:40 UTC 2016
| > 
| > Modified Files:
| > 	src/sys/netipsec: key.c
| > 
| > Log Message:
| > Fix port matching; we need to ignore ports when they are 0 not only in
| > the second saidx but the first one too. Fixes NAT-T issue with NetBSD
| > being the host behind NAT.
| Will this fix also resolve bin/47894?  Or is that one an entirely
| different beast?

I am not sure. From the log it does not seem that it fails to complete
find the saidx entry for it. But I would definitely give it a try, because
being behind NAT was not working for me before and now it is. I also have
a much better clue how to debug the problem now :-)

christos