Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 May 2002 19:10:00 +0200
From:      quak@mydiax.ch
To:        freebsd-security@FreeBSD.org
Subject:   Re: Re: IPSEC: is ipcomp broken in 4.5-stable ?
Message-ID:  <200205121710.g4CHA0o11330@dubb05h07-0.dplanet.ch>

next in thread | raw e-mail | index | archive | help
>Hi,
>
>
>You are welcome.  I just committed the fix into 5-CURRENT.  Since
>4-STABLE is in code freeze, when approved by re, I'll do MFC it.

Whoops, Hajimu=20

Transport compression works flawlessly, but tunnel mode seems to still be b=
roken now, if I use:

spdadd 192.168.2.0/24 192.168.1.0/24 any -P out ipsec ipcomp/tunnel/192.168=
.20.1-192.168.10.1/require;
spdadd 192.168.1.0/24 192.168.2.0/24 any -P in ipsec ipcomp/tunnel/192.168.=
10.1-192.168.20.1/require;

(And mirror of this on another machine)

transfers die again with similar symptoms, transfers hang at 34816, kernel =
spits errors:

ipcomp_decompress: inflate(Z_NO_FLUSH): invalid bit length repeat
ipcomp_decompress: inflate(Z_NO_FLUSH): oversubscribed literal/length tree

What is this ? :)

Regards

Kirill

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200205121710.g4CHA0o11330>