From 078ce348ae4fd05dc532ef565890582151ea1990 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Wed, 20 Jun 2007 09:46:54 +0000
Subject: [PATCH] IKEv1 rightallowany flag introduced

---
 NEWS | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index 683889f00..ac3e1afb4 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,24 @@ strongswan-4.1.4
   since routing through the IPsec tunnel is handled automatically
   by NETKEY's IPsec policies. As a consequence the left|rightnexthop
   parameter is not required any more.
-  
+
+- The new IKEv1 parameter right|leftallowany parameters helps to handle
+  the case where both peers possess dynamic IP addresses that are
+  usually resolved using DynDNS or a similar service. The configuration
+
+    right=peer.foo.bar
+    rightallowany=yes
+
+  can be used by the initiator to start up a connection to a peer
+  by resolving peer.foo.bar into the currently allocated IP address.
+  Thanks to the rightallowany flag the connection behaves later on
+  as
+
+   right=%any
+
+  so that the peer can rekey the connection as an initiator when his
+  IP address changes.
+
 
 strongswan-4.1.3
 ----------------