Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Jul 2015 13:42:39 +0500
From:      "Eugene M. Zheganin" <emz@norma.perm.ru>
To:        freebsd-stable@freebsd.org
Subject:   Re: ipsec broken again
Message-ID:  <55A61CFF.2020006@norma.perm.ru>
In-Reply-To: <20150715044455.GY15828@FreeBSD.org>
References:  <55A5E49D.1060000@norma.perm.ru> <20150715044455.GY15828@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi.

On 15.07.2015 09:44, Glen Barber wrote:
> On Wed, Jul 15, 2015 at 09:42:05AM +0500, Eugene M. Zheganin wrote:
>> As soon as I upgraded one of my ipsec routers to recent stable
>> (10.2-BETA1 #0 r285524) it stopped working as a security gateway. Ipsec
>> traffic is passed out and receiving in, SA are in place, but nothing
>> happens upon receipt (I run gre over ipsec, so gre interface doesn't see
>> any incoming packets). Last revision I have with ipsec working (probably
>> not the last in general) was r282461. Could please someone look into this ?
>>
> Please file a PR so this does not get lost.  Add re@ to the CC list, as
> well.
>
>
Update: ipsec is fine, the thing is about undocumented behavior of enc(4).

PR: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201581

Thanks.
Eugene.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?55A61CFF.2020006>