From owner-freebsd-security@FreeBSD.ORG Thu Jun 30 07:07:38 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1A38E16A41C for ; Thu, 30 Jun 2005 07:07:38 +0000 (GMT) (envelope-from mohanchandra_01@yahoo.co.in) Received: from web8510.mail.in.yahoo.com (web8510.mail.in.yahoo.com [202.43.219.172]) by mx1.FreeBSD.org (Postfix) with SMTP id 8F79143D5C for ; Thu, 30 Jun 2005 07:07:34 +0000 (GMT) (envelope-from mohanchandra_01@yahoo.co.in) Received: (qmail 79495 invoked by uid 60001); 30 Jun 2005 07:07:25 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=RrPTMHroW/ZAqAO0HZP8Cel1jWI1JLtL6HqzJzRIlf7mzBp/MiInplkMKKtEjVQx/bH6dhSJBtoLmhU9NuctYaBrpB5/BYIFBP1rhuH0Wkkpu0K2Ci1lTZ9UgQ56qTtge94GHbl+Wdl3dNGEvPLJu8CHZDB7Baj7b0S2vBn+hJM= ; Message-ID: <20050630070725.79493.qmail@web8510.mail.in.yahoo.com> Received: from [203.126.245.198] by web8510.mail.in.yahoo.com via HTTP; Thu, 30 Jun 2005 08:07:25 BST Date: Thu, 30 Jun 2005 08:07:25 +0100 (BST) From: mohan chandra To: freebsd-security@freebsd.org MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="0-533975443-1120115245=:79488" Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Problem with IPSec tunnel, using IPv6 addresses, ......... X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jun 2005 07:07:38 -0000 --0-533975443-1120115245=:79488 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Content-Id: Content-Disposition: inline Hi All, In the previous mail, I have sent is only the problem that occurs, because of using IPv6 addresses. But the connection works with IPv4 addresses without any problem. Thanx, Mohan. __________________________________________________________ How much free photo storage do you get? Store your friends 'n family snaps for FREE with Yahoo! Photos http://in.photos.yahoo.com --0-533975443-1120115245=:79488 Content-Type: text/plain; name="ipsec-host1.conf" Content-Description: pat2137723804 Content-Disposition: inline; filename="ipsec-host1.conf" ########The 'ipsec.conf' file at Host2 ######### # flush configs flush ; spdflush ; # add a SAD entry add fe80::2b0:d0ff:fe48:7ce7 fe80::2b0:d0ff:fe6f:dfa0 esp 0xFEAD -m transport -E 3des-cbc "ipv6readylogo3descbcout1" -A hmac-sha1 "ipv6readylogsha1out1"; add fe80::2b0:d0ff:fe6f:dfa0 fe80::2b0:d0ff:fe48:7ce7 esp 0xFEED -m transport -E 3des-cbc "ipv6readylogo3descbcin01" -A hmac-sha1 "ipv6readylogsha1in01"; # and specify what has to be encrypted spdadd fe80::2b0:d0ff:fe48:7ce7 fe80::2b0:d0ff:fe6f:dfa0 any -P out ipsec esp/transport/fe80::2b0:d0ff:fe48:7ce7-fe80::2b0:d0ff:fe6f:dfa0/require ; spdadd fe80::2b0:d0ff:fe6f:dfa0 fe80::2b0:d0ff:fe48:7ce7 any -P in ipsec esp/transport/fe80::2b0:d0ff:fe6f:dfa0-fe80::2b0:d0ff:fe48:7ce7/require ; --0-533975443-1120115245=:79488 Content-Type: text/plain; name="ipsec-host2.conf" Content-Description: pat1490342534 Content-Disposition: inline; filename="ipsec-host2.conf" ########The 'ipsec.conf' file at Host2 ######### # flush configs flush ; spdflush ; # add a SAD entry add fe80::2b0:d0ff:fe48:7ce7 fe80::2b0:d0ff:fe6f:dfa0 esp 0xFEAD -m transport -E 3des-cbc "ipv6readylogo3descbcout1" -A hmac-sha1 "ipv6readylogsha1out1"; add fe80::2b0:d0ff:fe6f:dfa0 fe80::2b0:d0ff:fe48:7ce7 esp 0xFEED -m transport -E 3des-cbc "ipv6readylogo3descbcin01" -A hmac-sha1 "ipv6readylogsha1in01"; # and specify what has to be encrypted spdadd fe80::2b0:d0ff:fe48:7ce7 fe80::2b0:d0ff:fe6f:dfa0 any -P out ipsec esp/transport/fe80::2b0:d0ff:fe48:7ce7-fe80::2b0:d0ff:fe6f:dfa0/require ; spdadd fe80::2b0:d0ff:fe6f:dfa0 fe80::2b0:d0ff:fe48:7ce7 any -P in ipsec esp/transport/fe80::2b0:d0ff:fe6f:dfa0-fe80::2b0:d0ff:fe48:7ce7/require ; --0-533975443-1120115245=:79488--