[strongSwan] Stronswan to ignore IKE-SA-INIT response from a bogus IPv6 address

Tobias Brunner tobias at strongswan.org
Wed May 23 09:42:54 CEST 2018


Hi Rajeev,

> I would
> imagine it should be rejected.

Why?  Unless you configure specific remote IP addresses for a connection
there is no reason to reject messages from any IPs.

Regards,
Tobias


More information about the Users mailing list