ipsec broken again

Eugene M. Zheganin emz at norma.perm.ru
Wed Jul 15 08:42:47 UTC 2015


Hi.

On 15.07.2015 09:44, Glen Barber wrote:
> On Wed, Jul 15, 2015 at 09:42:05AM +0500, Eugene M. Zheganin wrote:
>> As soon as I upgraded one of my ipsec routers to recent stable
>> (10.2-BETA1 #0 r285524) it stopped working as a security gateway. Ipsec
>> traffic is passed out and receiving in, SA are in place, but nothing
>> happens upon receipt (I run gre over ipsec, so gre interface doesn't see
>> any incoming packets). Last revision I have with ipsec working (probably
>> not the last in general) was r282461. Could please someone look into this ?
>>
> Please file a PR so this does not get lost.  Add re@ to the CC list, as
> well.
>
>
Update: ipsec is fine, the thing is about undocumented behavior of enc(4).

PR: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201581

Thanks.
Eugene.


More information about the freebsd-stable mailing list