From owner-freebsd-net@FreeBSD.ORG Thu Jan 20 17:04:16 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 451DF16A4CE; Thu, 20 Jan 2005 17:04:16 +0000 (GMT) Received: from citadel.icyb.net.ua (citadel.icyb.net.ua [212.40.38.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E42143D31; Thu, 20 Jan 2005 17:04:14 +0000 (GMT) (envelope-from avg@icyb.net.ua) Received: from [212.40.38.87] (oddity.topspin.kiev.ua [212.40.38.87]) by citadel.icyb.net.ua (8.8.8p3/ICyb-2.3exp) with ESMTP id TAA04975; Thu, 20 Jan 2005 19:04:12 +0200 (EET) (envelope-from avg@icyb.net.ua) Message-ID: <41EFE48C.5040206@icyb.net.ua> Date: Thu, 20 Jan 2005 19:04:12 +0200 From: Andriy Gapon User-Agent: Mozilla Thunderbird 1.0 (X11/20041230) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-net@freebsd.org, freebsd-security@freebsd.org Content-Type: text/plain; charset=KOI8-U Content-Transfer-Encoding: 7bit Subject: ipsec vs. broadcast X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jan 2005 17:04:16 -0000 Maybe this is already fixed in the newer code, I am still on 5.2.1 and have a problem with traffic that originally goes to a broadcast ip address but then gets encrypted by ipsec and should go into a tunnel but when it is sent it has ethernet broadcast flag. Just to be clear: traffic originates on the same host which is a tunnel endpoint. It looks to me that a fix could be as simple as clearing M_BCAST in ipsec code (ipsec4_output), but I am not sure. -- Andriy Gapon