Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 25 Sep 2004 02:04:29 +0200
From:      "Simon L. Nielsen" <simon@FreeBSD.org>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        freebsd-current@freebsd.org
Subject:   Re: 5.3 IPSEC broken
Message-ID:  <20040925000428.GA769@zaphod.nitro.dk>
In-Reply-To: <20040924235247.GA27440@xor.obsecurity.org>
References:  <20040924234332.GB5307@mehnert.org> <20040924235247.GA27440@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--dDRMvlgZJXvWKvBx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2004.09.24 16:52:48 -0700, Kris Kennaway wrote:
> On Sat, Sep 25, 2004 at 01:43:32AM +0200, Hannes Mehnert wrote:
> > Hi,
> >=20
> > in 5.3-BETA5 IPSec is broken.
>=20
> Please provide more details.

I think this is the issue that has been mentioned here a few times
that racoon keyexchange fail after the mbuma import.  I can't remember
the exact failure message from racoon right now, but it's in the
archives.

Setting MSIZE=3D512 in the kernel config file works around it.  It's
been a bit since I tested it, but I haven't seen any commit that
should fix the issue.

--=20
Simon L. Nielsen
FreeBSD Documentation Team

--dDRMvlgZJXvWKvBx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBVLYMh9pcDSc1mlERAu1NAJ9IgIATnEpAiotRqgWCzPJvNm+JgwCeKeAF
Yz99OyJYPwVWlM+BmvpEsc4=
=ndsE
-----END PGP SIGNATURE-----

--dDRMvlgZJXvWKvBx--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040925000428.GA769>