site, transform: Do not initiate rekey when packets too much out of order

[secnet] / transform.c

diff --git a/transform.c b/transform.c
index f55aa44..f1da564 100644 (file)
--- a/transform.c
+++ b/transform.c
@@ -247,7 +247,7 @@ static uint32_t transform_reverse(void *sst, struct buffer_if *buf,
     } else {
        /* Too much skew */
        *errmsg="seqnum: too much skew";
-       return 1;
+       return 2;
     }
     
     return 0;