From 1bad10259aff96ff7a2248e5b173f0c3fc35b025 Mon Sep 17 00:00:00 2001 From: Michele Di Maria Date: Fri, 15 Mar 2013 10:13:48 +0100 Subject: [PATCH] Fixes IPSec Status for natted tunnels See http://redmine.pfsense.org/issues/2884 for details. Thanks, Michele --- etc/inc/ipsec.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index 9ad3e4a747..2d5c1a7f00 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -354,7 +354,7 @@ function ipsec_phase2_status(& $spd,& $sad,& $ph1ent,& $ph2ent) { if( ipsec_lookup_ipsec_sa($spd,$sad,"out",$loc_ip,$rmt_ip,$loc_id,$rmt_id)) { if (empty($ph2ent['natlocalid']) && ipsec_lookup_ipsec_sa($spd,$sad,"in",$rmt_ip,$loc_ip,$rmt_id,$loc_id)) return true; - else if (!empty($ph2ent['natlocalid']) && ipsec_lookup_ipsec_sa($spd,$sad,"in",$rmt_ip,$natloc_id,$rmt_id,$natloc_id)) + else if (!empty($ph2ent['natlocalid']) && ipsec_lookup_ipsec_sa($spd,$sad,"out",$loc_ip,$rmt_ip,$loc_id,$rmt_id)) return true; }