Re: bin/47894: racoon w/NAT-T - pfkey update: wrong ports

[Egerváry Gergely <gergely%egervary.hu@localhost>]

The following reply was made to PR bin/47894; it has been noted by GNATS.

From: =?ISO-8859-1?Q?Egerv=E1ry_Gergely?= <gergely%egervary.hu@localhost>
To: gnats-bugs%NetBSD.org@localhost, gnats-admin%netbsd.org@localhost, 
 netbsd-bugs%netbsd.org@localhost
Cc: 
Subject: Re: bin/47894: racoon w/NAT-T - pfkey update: wrong ports
Date: Sun, 09 Jun 2013 18:26:32 +0200

 >  Good debugging. Please see:
 >  
 >  
 >  PR/47886: Dr. Wolfgang Stukenbrock: IPSEC_NAT_T enabled kernels may access
 >  outdated pointers and pass ESP data to UPD-sockets.
 >  While here, simplify the code and remove the IPSEC_NAT_T option; always
 >  compile nat-traversal in so that it does not bitrot.
 
 Now I have a NetBSD-6.99.21 sandbox with yesterday's CURRENT.
 No difference - still UDP/500...
 
 You can find my racoon debug log here:
   http://pastebin.com/sNyxeA4V
 
 Thank you.
 -- 
 Egerváry Gergely