Date: Sat, 25 Sep 2004 02:16:23 +0200 From: Hannes Mehnert <hannes@mehnert.org> To: Kris Kennaway <kris@obsecurity.org> Cc: freebsd-current@freebsd.org Subject: Re: 5.3 IPSEC broken Message-ID: <20040925001623.GC5307@mehnert.org> In-Reply-To: <20040924235247.GA27440@xor.obsecurity.org> References: <20040924234332.GB5307@mehnert.org> <20040924235247.GA27440@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Sep 24, 2004 at 04:52:48PM -0700, Kris Kennaway wrote: > On Sat, Sep 25, 2004 at 01:43:32AM +0200, Hannes Mehnert wrote: > > in 5.3-BETA5 IPSec is broken. > > Please provide more details. As described in http://lists.freebsd.org/pipermail/freebsd-current/2004-June/028442.html http://lists.freebsd.org/pipermail/freebsd-current/2004-August/033554.html the mbuma commit broke IPSec (ENOBUF) with default MSIZE (256). Setting it to 512 is a workaround, maybe someone more in FreeBSD kernel hacking should look at the problem. Best Regards, Hannes Mehnert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQFBVLjWRcuNlziBjRwRApiFAKC9uXQwNI8rkWuDJObHB9l/ewtHHgCeJ1Xt GmHuZQfiTLp7pYP2VTDale0= =w9p7 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040925001623.GC5307>