tolerate DNS lookup failures
authorAndreas Steffen <andreas.steffen@strongswan.org>
Mon, 6 Aug 2007 12:02:12 +0000 (12:02 -0000)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Mon, 6 Aug 2007 12:02:12 +0000 (12:02 -0000)
NEWS

diff --git a/NEWS b/NEWS
index 8ed4fbd..37253a2 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,14 @@
+strongswan-4.1.5
+----------------
+
+- If a DNS lookup failure occurs when resolving right=%<FQDN>
+  or right=<FQDN> combined with rightallowany=yes then the
+  connection is not updated by ipsec starter thus preventing
+  the disruption of an active IPsec connection. Only if the DNS
+  lookup successfully returns with a changed IP address the
+  corresponding connection definition is updated.
+
+
 strongswan-4.1.4
 ----------------