On Mar 7, 7:36pm, ja...@uninett.no (Jarle Greipsland) wrote: -- Subject: Re: CVS commit: src/sys/netipsec
| "Christos Zoulas" <chris...@netbsd.org> writes: | > Module Name: src | > Committed By: christos | > Date: Sat Mar 5 20:13:40 UTC 2016 | > | > Modified Files: | > src/sys/netipsec: key.c | > | > Log Message: | > Fix port matching; we need to ignore ports when they are 0 not only in | > the second saidx but the first one too. Fixes NAT-T issue with NetBSD | > being the host behind NAT. | Will this fix also resolve bin/47894? Or is that one an entirely | different beast? I am not sure. From the log it does not seem that it fails to complete find the saidx entry for it. But I would definitely give it a try, because being behind NAT was not working for me before and now it is. I also have a much better clue how to debug the problem now :-) christos