From d6f9707b7a1d96944c6d9ab273cf676cb8f58bc0 Mon Sep 17 00:00:00 2001 From: Enrico Scholz Date: Sun, 28 Feb 2010 14:40:57 +0100 Subject: Allow 'lport 0' setup for random port binding I am running a multihomed host where 'local ' must be specified for proper operation. Unfortunately, this implies 'lport 1194' or another static port. This causes problems with stateful firewalls which register the host/port pairs in the internal connection tracking table. On ungraceful reconnects, the new TCP connection will have same the host/port pairs but unexpected sequence numbers. The new connection will be assumed as invalid hence and be dropped. It would be nice when local port can be configured to be bound to a random port number. After reading code, | else if (streq (p[0], "lport") && p[1]) | ... | port = atoi (p[1]); |- if (!legal_ipv4_port (port)) |+ if (port != 0 && !legal_ipv4_port (port)) | { in options.c seems to be the only required change. This has been discussed here: Signed-off-by: David Sommerseth Acked-by: Gert Doering --- options.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/options.c b/options.c index 812c3de..7e0034e 100644 --- a/options.c +++ b/options.c @@ -4077,7 +4077,7 @@ add_option (struct options *options, VERIFY_PERMISSION (OPT_P_GENERAL|OPT_P_CONNECTION); port = atoi (p[1]); - if (!legal_ipv4_port (port)) + if ((port != 0) && !legal_ipv4_port (port)) { msg (msglevel, "Bad local port number: %s", p[1]); goto err; -- cgit v1.2.3