On Mon, Jun 13, 2016 at 11:48:13AM +1200, Blair Steven wrote: > > During testing we have discovered an issue with IPsec NAT-T where the SPI > is over writing the source and dest ports of the UDP header.
The headers should be restored after the crypto operation in esp_restore_header(). Does this not happen in your case? What kind of problem do you experience?
