Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Sep 2023 07:43:00 -0400
From:      mike tancsa <mike@sentex.net>
To:        d@delphij.net, Kristof Provost <kp@FreeBSD.org>
Cc:        freeBSD-net@FreeBSD.org
Subject:   Re: Regression with pf or IPv6 on FreeBSD 14 with IPsec gif(4) tunnel
Message-ID:  <19221214-b0a4-4e06-9b04-7cc0f938ab23@sentex.net>
In-Reply-To: <67ccbe8b-6d81-0dc7-58cd-c89eab5fb3dc@delphij.net>
References:  <8a063059-d3be-1dd5-d89d-d0054ee269cd@delphij.net> <0DA172FD-8E4E-4DA5-A55E-8470A8EEF878@FreeBSD.org> <67ccbe8b-6d81-0dc7-58cd-c89eab5fb3dc@delphij.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 9/15/2023 1:38 AM, Xin Li wrote:
> On 2023-09-14 3:28 AM, Kristof Provost wrote:
>> On 14 Sep 2023, at 4:54, Xin Li wrote:
>>> Hi!
>>> And as a shoot to the dark, I tried again with IPsec (racoon) 
>>> disabled, and the issue is gone.  My IPsec configuration is fairly 
>>> common: 
>
> I'm still comparing the code and reading the history of changes 
> between stable/13 and stable/14 to see if there are something obvious, 
> but more insights from others would be appreciated :)
>
[/me takes a in the dark]

maybe something like net.inet.ipsec.filtertunnel=1 is needed now ?

     ---Mike




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19221214-b0a4-4e06-9b04-7cc0f938ab23>