summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/message.h
diff options
context:
space:
mode:
authorHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2007-04-15 19:37:47 +0000
committerHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2007-04-15 19:37:47 +0000
commit4ff97e963e049d5e99aa0a3595ed29593130d870 (patch)
tree998d6fc897515b72e3adbf41f2a9e0e898f726cc /sbin/isakmpd/message.h
parent453a2d2072a61d4fbb1639b5a72c18cd2bd9ce33 (diff)
Fix interop-issue with vpn peers that start reyking on port 4500 when
NAT-T is used. Solves problems with cisco and openswan. Tested by todd@ (cisco interop), ok ho@ Original fix with Stefan Roth (stefan dot roth at siemens dot com), thanks!
Diffstat (limited to 'sbin/isakmpd/message.h')
-rw-r--r--sbin/isakmpd/message.h5
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/isakmpd/message.h b/sbin/isakmpd/message.h
index 7d9b1e87431..04cf6bfac3e 100644
--- a/sbin/isakmpd/message.h
+++ b/sbin/isakmpd/message.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: message.h,v 1.24 2005/05/26 06:11:09 hshoexer Exp $ */
+/* $OpenBSD: message.h,v 1.25 2007/04/15 19:37:46 hshoexer Exp $ */
/* $EOM: message.h,v 1.51 2000/10/10 12:36:39 provos Exp $ */
/*
@@ -166,6 +166,9 @@ struct message {
/* This message has successfully been authenticated. */
#define MSG_AUTHENTICATED 0x10
+/* The message was received on the NAT-T port. */
+#define MSG_NATT 0x20
+
TAILQ_HEAD(msg_head, message);
/* The number of different ISAKMP payloads supported. */