5.3 IPSEC broken

Hannes Mehnert hannes at mehnert.org
Fri Sep 24 17:15:42 PDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Sep 24, 2004 at 04:52:48PM -0700, Kris Kennaway wrote:
> On Sat, Sep 25, 2004 at 01:43:32AM +0200, Hannes Mehnert wrote:
> > in 5.3-BETA5 IPSec is broken.
> 
> Please provide more details.

As described in
http://lists.freebsd.org/pipermail/freebsd-current/2004-June/028442.html
http://lists.freebsd.org/pipermail/freebsd-current/2004-August/033554.html
the mbuma commit broke IPSec (ENOBUF) with default MSIZE (256). Setting
it to 512 is a workaround, maybe someone more in FreeBSD kernel hacking
should look at the problem.

Best Regards,

Hannes Mehnert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)

iD8DBQFBVLjWRcuNlziBjRwRApiFAKC9uXQwNI8rkWuDJObHB9l/ewtHHgCeJ1Xt
GmHuZQfiTLp7pYP2VTDale0=
=w9p7
-----END PGP SIGNATURE-----


More information about the freebsd-current mailing list