[strongSwan] Problem observed during traffic selector narrowing

Martin Willi martin at strongswan.org
Thu Jun 13 13:42:25 CEST 2013


> s-gw-1 has higher IP address range but its protocol range is smaller
> and vice versa 

I indeed could reproduce the issue. Seems that the subset matching was
not correct when selecting a config in this specific case. I've pushed a
fix [1] to master.



More information about the Users mailing list