From owner-freebsd-net@FreeBSD.ORG  Sat Aug 23 03:05:41 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3BDA716A4BF; Sat, 23 Aug 2003 03:05:41 -0700 (PDT)
Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua
	[212.110.138.65])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 4E0C843FE9; Sat, 23 Aug 2003 03:05:34 -0700 (PDT)
	(envelope-from ru@sunbay.com)
Received: from whale.sunbay.crimea.ua (ru@localhost [127.0.0.1])
	h7NA5NAk081350
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Sat, 23 Aug 2003 13:05:23 +0300 (EEST)	(envelope-from ru@sunbay.com)
Received: (from ru@localhost)
	by whale.sunbay.crimea.ua (8.12.9/8.12.8/Submit) id h7NA5MMt081345;
	Sat, 23 Aug 2003 13:05:22 +0300 (EEST)
	(envelope-from ru)
Date: Sat, 23 Aug 2003 13:05:22 +0300
From: Ruslan Ermilov <ru@freebsd.org>
To: Mike Tancsa <mike@sentex.net>
Message-ID: <20030823100522.GA80252@sunbay.com>
References: <xMhrG.A.G4.BxOR_@coal.sentex.ca>
	<r6mckvsvr8uuqcembbpn3nrr5vgm1vdeip@4ax.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="T4sUOijqQbZv57TR"
Content-Disposition: inline
In-Reply-To: <r6mckvsvr8uuqcembbpn3nrr5vgm1vdeip@4ax.com>
User-Agent: Mutt/1.5.4i
cc: freebsd-net@freebsd.org
cc: Sam Leffler <sam@freebsd.org>
Subject: Re: [IPsec] ipcomp in tunnel mode still broken?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Aug 2003 10:05:41 -0000


--T4sUOijqQbZv57TR
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Aug 22, 2003 at 01:55:25PM -0400, Mike Tancsa wrote:
> On Thu, 21 Aug 2003 18:58:20 +0300, in sentex.lists.freebsd.net you
> wrote:
>=20
> >Hi there!
> >
> >It seems that ipcomp in the tunnel mode is still broken in at
> >least 4.x (I cannot test it with two 5.x boxes at the moment).
> >Can you please look into this?
>=20
> Hi, what is the config you are using to test this ?  IPSEC ?
> FAST_IPSEC ?
>=20
IPSEC in tunnel mode, with or without ESP; fast_ipsec(4) is
documented not to work with IPcomp at the moment.

> type of keying ?
>=20
Manual, but keying doesn't have to do anything with compression.

If you (magically) have it working, I'd be grateful for an
example config.


Cheers,
--=20
Ruslan Ermilov		Sysadmin and DBA,
ru@sunbay.com		Sunbay Software Ltd,
ru@FreeBSD.org		FreeBSD committer

--T4sUOijqQbZv57TR
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE/RzxiUkv4P6juNwoRAiwBAJ42DFAnvEplU01daCZyeFng24nHDQCghwQ9
cq+dK7fkH8xzDXFGU0YzCQk=
=8xFw
-----END PGP SIGNATURE-----

--T4sUOijqQbZv57TR--