From owner-freebsd-current@freebsd.org  Thu Jul 23 08:12:59 2015
Return-Path: <owner-freebsd-current@freebsd.org>
Delivered-To: freebsd-current@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 15AB89A7E2E
 for <freebsd-current@mailman.ysv.freebsd.org>;
 Thu, 23 Jul 2015 08:12:59 +0000 (UTC)
 (envelope-from shuriku@shurik.kiev.ua)
Received: from graal.it-profi.org.ua (graal.shurik.kiev.ua [193.239.74.7])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id CB2DD16BD
 for <freebsd-current@freebsd.org>; Thu, 23 Jul 2015 08:12:58 +0000 (UTC)
 (envelope-from shuriku@shurik.kiev.ua)
Received: from [109.237.91.29] (helo=thinkpad.it-profi.org.ua)
 by graal.it-profi.org.ua with esmtpa (Exim 4.85 (FreeBSD))
 (envelope-from <shuriku@shurik.kiev.ua>) id 1ZIB5P-000Ejx-Mh
 for freebsd-current@freebsd.org; Thu, 23 Jul 2015 10:38:35 +0300
Message-ID: <55B099F6.8000004@shurik.kiev.ua>
Date: Thu, 23 Jul 2015 10:38:30 +0300
From: Alexandr Krivulya <shuriku@shurik.kiev.ua>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: FreeBSD CURRENT <freebsd-current@freebsd.org>
Subject: IPSEC stop works after r285336
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-SA-Exim-Connect-IP: 109.237.91.29
X-SA-Exim-Mail-From: shuriku@shurik.kiev.ua
X-SA-Exim-Scanned: No (on graal.it-profi.org.ua);
 SAEximRunCond expanded to false
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jul 2015 08:12:59 -0000

I have IPSEC tunnel inside l2tp tunnel via mpd. After r285536 I see only
outgoing esp packets on ng interface:

root@thinkpad:/usr/src # tcpdump -i ng0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ng0, link-type NULL (BSD loopback), capture size 262144 bytes
10:35:27.331886 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9a5), length 140
10:35:28.371707 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9a6), length 140
10:35:29.443536 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9a7), length 140
10:35:30.457370 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9a8), length 140
10:35:31.475606 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9a9), length 140
10:35:31.622315 IP 10.10.10.1.isakmp > 10.10.10.2.isakmp: isakmp: phase
2/others ? inf[E]
10:35:31.622544 IP 10.10.10.2.isakmp > 10.10.10.1.isakmp: isakmp: phase
2/others ? inf[E]
10:35:31.622658 IP 10.10.10.2.isakmp > 10.10.10.1.isakmp: isakmp: phase
2/others ? inf[E]
10:35:31.623933 IP 10.10.10.1.isakmp > 10.10.10.2.isakmp: isakmp: phase
2/others ? inf[E]
10:35:32.492349 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9aa), length 140
10:35:33.509346 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9ab), length 140
10:35:34.527187 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9ac), length 140
10:35:35.539600 IP 10.10.10.2 > 10.10.10.1:
ESP(spi=0x03081e58,seq=0x9ad), length 140

With r285535 all works fine.