Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Aug 2016 08:58:33 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 211719] ipsec-tools racoon send error on some configuration
Message-ID:  <bug-211719-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211719

            Bug ID: 211719
           Summary: ipsec-tools racoon send error on some configuration
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: evd_sas@mail.ru

Created attachment 173491
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D173491&action=
=3Dedit
racoon cant establish connection (cant sent packets) in some configurations

Good day.=20
I need encript some UDP-traffic. On previos releases (8.x, 9.x) I use this
construction for setkey:
spdadd 89.221.63.26[123]            89.221.63.7[123]     udp -P out  ipsec
esp/transport//require;
But on version ipsec-tools-0.8.2_1, FreeBSD 10.3-RELEASE-p6 (and 10.1p9
ipsec-tools-0.8.2_1) this construction result racoon to:
2016-08-10 11:34:01: ERROR: phase1 negotiation failed due to send error.
192ac12870be2762:0000000000000000
, and by tcpdump I not see any packets from host.

On the other hand, with construct=20
spdadd 89.221.63.26            89.221.63.7     udp -P out  ipsec
esp/transport//require;
(without specifying the port) it work fine.

Attachment:=20
Variant1 - without specifing the port
Variant2 - specifing the port (in this example, port 123)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-211719-13>