site, transform: Do not initiate rekey when packets too much out of order

[secnet] / transform.c

diff --git a/transform.c b/transform.c
index f55aa447dfd41c1c64c3dfc6b658010057b77d55..f1da5642099d0d1ec7f1546498985e60b06a5157 100644 (file)
--- a/transform.c
+++ b/transform.c
@@ -247,7 +247,7 @@ static uint32_t transform_reverse(void *sst, struct buffer_if *buf,
     } else {
        /* Too much skew */
        *errmsg="seqnum: too much skew";
-       return 1;
+       return 2;
     }
     
     return 0;