[Openswan dev] Re: [Openswan Users] multiple tunnel fails after upgrade, kernel 2.6.8 bug!?

[Ken Bantoft]

Hi Herbert, 

I'm applying your patch to 2.1.x, 2.2.x and HEAD later today, thanks!

Ken


On Tue, 7 Sep 2004, Herbert Xu wrote:

> On Tue, Sep 07, 2004 at 10:26:35PM +1000, herbert wrote:
> > On Tue, Sep 07, 2004 at 02:00:54PM +0200, Vik Heyndrickx wrote:
> > > 
> > > I can from the left host:
> > > - never ping 10.222.222.1, regardless wether the tunnel is up or not
> > > - ping 10.222.223.1, but only when the tunnel is up, as expected.
> > 
> > What if you ping with -s 10000, does it work then?
> 
> If it does, then this patch should fix the problem.
> 
> What happened is that I filled in the SA selectors before the policy
> selectors became fully functional.  However, SA selectors were only
> a temporary hack and broke with IPIP tunnel SAs which are used by
> IPCOMP.
> 
> What doesn't make sense is why it didn't work for you when you
> disabled compression.