[Bug 210791] New: openswan: This pluto does not have aggressive mode (congradulations on your wisdom)
https://bugzilla.novell.com/show_bug.cgi?id=210791 Summary: openswan: This pluto does not have aggressive mode (congradulations on your wisdom) Product: SUSE Linux 10.1 Version: Final Platform: Other OS/Version: SuSE Linux 10.1 Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: rnissl@gmx.de QAContact: qa@suse.de I don't understand, why a SuSE package lacks such a feature. Maybe for security reasons, but what if it's the only way to establish a connection to a customers VPN router? Please compile the package with support for aggressive mode. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=210791 cthiel@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |mt@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=210791 milisav.radmanic@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Info Provider|security-team@suse.de | Resolution| |WONTFIX ------- Comment #7 from milisav.radmanic@novell.com 2007-03-15 03:13 MST ------- This behavior is not a bug. The reason why "aggrmode" is not compiled in is due to security reasons. If you disable aggressive mode it is still possible by a requester to force you into aggressive mode. The openswan project team confirmed that this is not an intended behavior and will be addressed upstream. We're unable to predict when this will be done, but as soon as the usage will be safe, we will provide updated packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=210791 ------- Comment #8 from mt@novell.com 2007-03-15 04:17 MST ------- Further, there is the problem, that nat traversal and aggressive mode doesn't work together. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=210791 ------- Comment #11 from rnissl@gmx.de 2007-03-15 12:40 MST ------- Thank you very much for the reply. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply＠novell.com