IPSec troubles

[Bjoern A. Zeeb]

On Tue, 30 Mar 2004, Hajimu UMEMOTO wrote:

Hi,

> >>>>> On Tue, 30 Mar 2004 12:33:08 +0000 (UTC)
> >>>>> "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net> said:
>
> bzeeb> What I had to do had been "excluding IKE traffic" by doing s.th.
> bzeeb>  like this (router side config):
> bzeeb> spdadd  ROUTER[500] NOTEBOOK[500] udp
> bzeeb>         -P out none ;
> bzeeb> spdadd  NOTEBOOK[500] ROUTER[500] udp
> bzeeb>         -P in none ;
> bzeeb> This for sure is not the most nifty way to do but it works.
>
> The per socket security policy is broken under 5.2.1-RELEASE, and it
> was fixed in 5-CURRENT.  Racoon uses it to exclude IKE packets from
> target of IPsec.  So, the bzeeb's way should work for workaround.

just for the archives (and to let me sleep well again ;-) can you
please point me to the commit in question ?

Thanks.

-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT
56 69 73 69 74				http://www.zabbadoz.net/