<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">They seem to get created when the link goes down for a while - they target particular traffic flows (specifying the port etc.) When the link comes back up they stick around and cause chaos. Restarting the ipsec service fixes the problem.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Anyone know why these would get created?</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Iain</div> <div id="bloop_sign_1405775586087864832" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px"><br></div></div> <br><p style="color:#000;">On 18 July 2014 at 08:06:27, Iain Buchanan (<a href="mailto:iainbuc@gmail.com">iainbuc@gmail.com</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>
<title></title>
<div dir="ltr">Hi,
<div><br></div>
<div>I'm using Openswan 2.6.37/K3.2.0-65-generic (netkey) and I'm
having strange issues where just UDP traffic occasionally stops
going through an Openswan IPSEC link. I've also been having
TCP connection drop-outs occurring that I'm starting to suspect are
also due to ip xfrm policy rules appearing (yet to catch it in the
act though).</div>
<div><br></div>
<div>If I do "ip xfrm policy" when UDP stops working I can see
rules appearing that explicitly drop the UDP traffic between the
two hosts. Removing these rules fixes the issue.</div>
<div><br></div>
<div>This may not be an Openswan issue at all, but does anyone have
any idea why this would occur? I'm having great difficulty
finding any documentation around who changes this table, why and
when!</div>
<div><br></div>
<div>Iain</div>
</div>
</div></div></span></blockquote></body></html>