From owner-freebsd-security  Mon May 13  8:38:32 2002
Delivered-To: freebsd-security@freebsd.org
Received: from cnvbrlx01.net.cnv.at (ws166.cnv.at [212.51.224.166])
	by hub.freebsd.org (Postfix) with ESMTP id 63C5937B408
	for <freebsd-security@FreeBSD.ORG>; Mon, 13 May 2002 08:38:27 -0700 (PDT)
Received: from cnvbrlx01.net.cnv.at (localhost [127.0.0.1])
	by cnvbrlx01.net.cnv.at (8.12.1/8.12.1) with ESMTP id g4DFYGJZ004945;
	Mon, 13 May 2002 17:34:16 +0200
Received: from slashtom.slash10.com (fritz.intra.vtg.at [10.254.0.234])
	by cnvbrlx01.net.cnv.at (8.12.1/8.12.1) with ESMTP id g4DFYGVo004940;
	Mon, 13 May 2002 17:34:16 +0200
Message-Id: <5.1.0.14.0.20020513174837.02c04d28@alpha.slash10.net>
X-Sender: tf@alpha.slash10.net
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Mon, 13 May 2002 17:54:54 +0200
To: freebsd-security@FreeBSD.ORG
From: Thomas Fritz <tf@slash10.com>
Subject: 
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hi there!

On the URL http://www.onlamp.com/pub/a/bsd/2001/12/10/ipsec.html I found 
this warning below:

One other word of warning -- if you reboot one of the hosts, and suddenly 
have connectivity problems, flush the keys on both machines by running 
setkey -F. It's possible for the keys to get out of sync.


Is there any way to overcome this problem without flushing the keys by hand?


Thanks in advance

/tom


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message