Hi David,<br><br>I don't know if I'm using KLIPS+ALG support. How I do to check this?<br>In my testing my tunnel is also up fine, but can't receive packets from the <br>
remote end. TX error count is increased in local ipsec0 interface when i try sent packets to remote end.<br><br><br>Thanks,<br>Regards,<br clear="all">---<br>Sérgio Cioban Filho - LPIC1<br>------------------------------------------------------------<br>
| Linux - Servidores - Firewall - VPN<br>| Virtualização - VoIP - ShellScript - C - PHP <br>| <a href="http://cioban.googlepages.com">http://cioban.googlepages.com</a><br>| +55 48 9989-8733<br>------------------------------------------------------------<br>
..:: Seja livre, use LiNuX!! ::..<br>
<br><br><div class="gmail_quote">On Mon, Dec 1, 2008 at 9:01 PM, David McCullough <span dir="ltr"><<a href="mailto:David_Mccullough@securecomputing.com">David_Mccullough@securecomputing.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
Jivin Paul Wouters lays it down ...<br>
<div><div></div><div class="Wj3C7c">> On Mon, 1 Dec 2008, Sergio Cioban Filho wrote:<br>
><br>
> > Thanks for yor answer.<br>
> > I've tried to use version 2.6.19, but same error has ocurred.<br>
> > The SELinux has disabled.<br>
> > The output of ipsec barf is attached.<br>
><br>
> I don't see anything wrong. Are you using ping -I ? since you did not<br>
> add leftsourceip= and rightsourceip= ?<br>
<br>
</div></div>I am looking at a problem in this area.<br>
<br>
Are you using KLIPS + ALG support ?<br>
<br>
In my testing the tunnel is up fine, can receive packets from the<br>
remote end ok, but if you turn on debug at the remote end the packets being<br>
by KLIPS+ALG are not healthy.<br>
<br>
Can you check packets coming the other way ?<br>
<br>
Cheers,<br>
Davidm<br>
<font color="#888888"><br>
--<br>
David McCullough, <a href="mailto:david_mccullough@securecomputing.com">david_mccullough@securecomputing.com</a>, Ph:+61 734352815<br>
Secure Computing - SnapGear <a href="http://www.uCdot.org" target="_blank">http://www.uCdot.org</a> <a href="http://www.snapgear.com" target="_blank">http://www.snapgear.com</a><br>
</font></blockquote></div><br>