From owner-freebsd-current@FreeBSD.ORG  Sat Sep 25 00:04:32 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 310F716A4CE
	for <freebsd-current@freebsd.org>;
	Sat, 25 Sep 2004 00:04:32 +0000 (GMT)
Received: from zaphod.nitro.dk (port324.ds1-khk.adsl.cybercity.dk
	[212.242.113.79])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9A19543D5A
	for <freebsd-current@freebsd.org>;
	Sat, 25 Sep 2004 00:04:31 +0000 (GMT)
	(envelope-from simon@zaphod.nitro.dk)
Received: by zaphod.nitro.dk (Postfix, from userid 3000)
	id 9DF8711AB2; Sat, 25 Sep 2004 02:04:29 +0200 (CEST)
Date: Sat, 25 Sep 2004 02:04:29 +0200
From: "Simon L. Nielsen" <simon@FreeBSD.org>
To: Kris Kennaway <kris@obsecurity.org>
Message-ID: <20040925000428.GA769@zaphod.nitro.dk>
References: <20040924234332.GB5307@mehnert.org>
	<20040924235247.GA27440@xor.obsecurity.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="dDRMvlgZJXvWKvBx"
Content-Disposition: inline
In-Reply-To: <20040924235247.GA27440@xor.obsecurity.org>
User-Agent: Mutt/1.5.6i
cc: Hannes Mehnert <hannes@mehnert.org>
cc: freebsd-current@freebsd.org
Subject: Re: 5.3 IPSEC broken
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Sep 2004 00:04:32 -0000


--dDRMvlgZJXvWKvBx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2004.09.24 16:52:48 -0700, Kris Kennaway wrote:
> On Sat, Sep 25, 2004 at 01:43:32AM +0200, Hannes Mehnert wrote:
> > Hi,
> >=20
> > in 5.3-BETA5 IPSec is broken.
>=20
> Please provide more details.

I think this is the issue that has been mentioned here a few times
that racoon keyexchange fail after the mbuma import.  I can't remember
the exact failure message from racoon right now, but it's in the
archives.

Setting MSIZE=3D512 in the kernel config file works around it.  It's
been a bit since I tested it, but I haven't seen any commit that
should fix the issue.

--=20
Simon L. Nielsen
FreeBSD Documentation Team

--dDRMvlgZJXvWKvBx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBVLYMh9pcDSc1mlERAu1NAJ9IgIATnEpAiotRqgWCzPJvNm+JgwCeKeAF
Yz99OyJYPwVWlM+BmvpEsc4=
=ndsE
-----END PGP SIGNATURE-----

--dDRMvlgZJXvWKvBx--