From owner-freebsd-bugs@FreeBSD.ORG Sat Jun 19 00:40:03 2010 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A2608106564A for ; Sat, 19 Jun 2010 00:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 91DA18FC1D for ; Sat, 19 Jun 2010 00:40:03 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o5J0e3dN071030 for ; Sat, 19 Jun 2010 00:40:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o5J0e39P071029; Sat, 19 Jun 2010 00:40:03 GMT (envelope-from gnats) Date: Sat, 19 Jun 2010 00:40:03 GMT Message-Id: <201006190040.o5J0e39P071029@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Alex Cc: Subject: Re: kern/147894: IPv6-in-IPv4 does not work inside an ESP-only IPsec tunnel X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Alex List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jun 2010 00:40:03 -0000 The following reply was made to PR kern/147894; it has been noted by GNATS. From: Alex To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/147894: IPv6-in-IPv4 does not work inside an ESP-only IPsec tunnel Date: Fri, 18 Jun 2010 20:34:33 -0400 The following error is printed when net.inet6.ipsec6.debug is set to 1: Jun 18 20:19:23 orion kernel: ipsec6_output_tunnel: family mismatched between inner and outer, spi=156253021 Jun 18 20:19:23 orion kernel: [ip6_output:549] (ipsec): error code 47 The relevant lines of code are: --- ipsec_output.c begins here --- if (isr->sav->sah->saidx.src.sa.sa_family != AF_INET6) { ipseclog((LOG_ERR, "%s: family mismatched between " "inner and outer, spi=%u\n", __func__, ntohl(isr->sav->spi))); V_ipsec6stat.ips_out_inval++; error = EAFNOSUPPORT; goto bad; } --- ipsec_output.c ends here --- I will be looking further in to this.