Re: [design] protocol/port in Phase 1 ID Payload must be 0/0 or 17/500 but are 17/0 (seems to be an old problem ???)

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "James" == James Harper <[email protected]> writes:
    James> I feel that the the first paragraph I quoted is a little
    James> ambiguous, is 
    James> it saying that:
    James> (protocol must be 0 and port must be 0) or (protocol must be 17
    James> and port 
    James> must be 500) (this is ipsec_doi.c 's interpretation).

  I believe that this is the correct interpretation.

    James> Or is it saying that
    James> (protocol must be 17 or 0) and (port must be 500 or 0) (cisco
    James> conforms 
    James> to this interpretation)

  I believe that Cisco is wrong to think this, and you should report a bug.
  However, I think that we can go with the more liberal interpretation, but
we won't send that.

] Collecting stories about my dad: http://www.sandelman.ca/cjr/ |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian/notebook using, kernel hacking, security guy");  [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBP6bqiYqHRg3pndX9AQG3JQQAz6unATrB+wpTIlLsCtKHdAXF2ReN8ZH7
T97N1AWHtQ4QMgojUaAovd+WSh7mDnDEuanEDYfoRTEXqmqgLwpCfWfUMswFxA3i
qSCNip2nwZzzyhl2XNEFQIJpyJxQN2q4uEhA+Hx+OJcEdp6MbOzrKV7KIpJZGOqH
4x7o+JGXejc=
=2IJl
-----END PGP SIGNATURE-----