Disable the "may kill you" message, because:

1) It's not documented anywhere.
2) The problem it's attempting to warn about is not documented anywhere.
3) There are no example configs (or any I found with Google) that use the
   "listen" directive.
4) In any event, it's poorly worded and unclear what it's talking about.
This commit is contained in:
mycroft 2004-08-06 13:57:05 +00:00
parent 34daff1e0a
commit 6e317e9e72
1 changed files with 5 additions and 1 deletions

View File

@ -30,7 +30,7 @@
*/
#include <sys/cdefs.h>
__RCSID("$NetBSD: isakmp.c,v 1.15 2004/04/12 03:34:07 itojun Exp $");
__RCSID("$NetBSD: isakmp.c,v 1.16 2004/08/06 13:57:05 mycroft Exp $");
#include <sys/types.h>
#include <sys/param.h>
@ -1287,17 +1287,21 @@ isakmp_open()
/* warn if wildcard address - should we forbid this? */
switch (p->addr->sa_family) {
case AF_INET:
#if 0
if (((struct sockaddr_in *)p->addr)->sin_addr.s_addr == 0)
plog(LLV_WARNING, LOCATION, NULL,
"listening to wildcard address,"
"broadcast IKE packet may kill you\n");
#endif
break;
#ifdef INET6
case AF_INET6:
#if 0
if (IN6_IS_ADDR_UNSPECIFIED(&((struct sockaddr_in6 *)p->addr)->sin6_addr))
plog(LLV_WARNING, LOCATION, NULL,
"listening to wildcard address, "
"broadcast IKE packet may kill you\n");
#endif
break;
#endif
default: