From owner-freebsd-security  Mon Oct 29  1:20:16 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mine.kame.net (kame195.kame.net [203.178.141.195])
	by hub.freebsd.org (Postfix) with ESMTP id D00CD37B403
	for <freebsd-security@freebsd.org>; Mon, 29 Oct 2001 01:20:14 -0800 (PST)
Received: from localhost ([3ffe:501:4819:1000:260:1dff:fe21:f766])
	by mine.kame.net (8.11.1/3.7W) with ESMTP id f9T9YDH68448;
	Mon, 29 Oct 2001 18:34:13 +0900 (JST)
To: jus@security.za.net
Cc: freebsd-security@freebsd.org
Subject: Re: Upgrade to 4.4-STABLE introduces IPSec problems..?
In-Reply-To: Your message of "Mon, 29 Oct 2001 11:06:16 +0200 (SAST)"
	<Pine.BSF.4.21.0110291103410.17108-100000@athena.za.net>
References: <Pine.BSF.4.21.0110291103410.17108-100000@athena.za.net>
X-Mailer: Cue version 0.6 (011026-1440/sakane)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Message-Id: <20011029182003H.sakane@kame.net>
Date: Mon, 29 Oct 2001 18:20:03 +0900
From: Shoichi Sakane <sakane@kame.net>
X-Dispatcher: imput version 20000228(IM140)
Lines: 12
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> Here's my configuration..

> [root@athena] ~# cat /usr/local/etc/ipsec.conf
> flush;
> spdflush;
> add 196.30.167.130 196.30.167.200 esp 9991 -m transport -E blowfish-cbc "keyword erased";
> add 196.30.167.200 196.30.167.130 esp 9992 -m transport -E blowfish-cbc "keyword erased";
> spdadd 196.30.167.130 196.30.167.200 any -P out ipsec esp/transport/196.30.167.130-196.30.167.200/require;
> spdadd 196.30.167.200 196.30.167.130 any -P out ipsec esp/transport/196.30.167.200-196.30.167.130/require;

freebsd4.4-release has no problem in the transport mode case.
did you have any message in the system log, or did netstat talk anything ?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message