--- gvpe/src/connection.C	2003/08/08 09:29:22	1.14
+++ gvpe/src/connection.C	2003/09/01 15:52:03	1.16
@@ -199,12 +199,12 @@
 // but low on resources.
 struct net_rate_limiter : list<net_rateinfo>
 {
-  static const double ALPHA  = 1. - 1. / 180.; // allow bursts
+  static const double ALPHA  = 1. - 1. / 600.; // allow bursts
   static const double CUTOFF = 10.;            // one event every CUTOFF seconds
   static const double EXPIRE = CUTOFF * 30.;   // expire entries after this time
   static const double MAXDIF = CUTOFF * (1. / (1. - ALPHA)); // maximum diff /count value
 
-  bool can (const sockinfo &si) { return can((u32)si.host);             }
+  bool can (const sockinfo &si) { return can((u32)si.host); }
   bool can (u32 host);
 };
 
@@ -477,14 +477,26 @@
 
 bool config_packet::chk_config () const
 {
-  return prot_major == PROTOCOL_MAJOR
-         && randsize == RAND_SIZE
-         && hmaclen == HMACLENGTH
-         && flags == curflags ()
-         && challengelen == sizeof (rsachallenge)
-         && cipher_nid == htonl (EVP_CIPHER_nid (CIPHER))
-         && digest_nid == htonl (EVP_MD_type (RSA_HASH))
-         && hmac_nid   == htonl (EVP_MD_type (DIGEST));
+  if (prot_major != PROTOCOL_MAJOR)
+    slog (L_WARN, _("major version mismatch (%d <=> %d)"), prot_major, PROTOCOL_MAJOR);
+  else if (randsize != RAND_SIZE)
+    slog (L_WARN, _("rand size mismatch (%d <=> %d)"), randsize, RAND_SIZE);
+  else if (hmaclen != HMACLENGTH)
+    slog (L_WARN, _("hmac length mismatch (%d <=> %d)"), hmaclen, HMACLENGTH);
+  else if (flags != curflags ())
+    slog (L_WARN, _("flag mismatch (%x <=> %x)"), flags, curflags ());
+  else if (challengelen != sizeof (rsachallenge))
+    slog (L_WARN, _("challenge length mismatch (%d <=> %d)"), challengelen, sizeof (rsachallenge));
+  else if (cipher_nid != htonl (EVP_CIPHER_nid (CIPHER)))
+    slog (L_WARN, _("cipher mismatch (%x <=> %x)"), ntohl (cipher_nid), EVP_CIPHER_nid (CIPHER));
+  else if (digest_nid != htonl (EVP_MD_type (RSA_HASH)))
+    slog (L_WARN, _("digest mismatch (%x <=> %x)"), ntohl (digest_nid), EVP_MD_type (RSA_HASH));
+  else if (hmac_nid != htonl (EVP_MD_type (DIGEST)))
+    slog (L_WARN, _("hmac mismatch (%x <=> %x)"), ntohl (hmac_nid), EVP_MD_type (DIGEST));
+  else
+    return true;
+
+  return false;
 }
 
 struct auth_req_packet : config_packet
@@ -918,6 +930,9 @@
                     break;
                   }
               }
+            else
+              slog (L_WARN, _("%s(%s): protocol mismatch"),
+                    conf->nodename, (const char *)rsi);
 
             send_reset (rsi);
           }