[Openswan dev] ip_hdr discrepancies
Paul Wouters
paul at xelerance.com
Fri Dec 19 20:05:24 EST 2008
On Sat, 20 Dec 2008, Sybille Ebert wrote:
> > Yeah, that was fixed and you can see it in openswan 2.6.20rc1
>
> Yes, it compiles now.
> Now the "shunt SA of DROP or no eroute" is gone, but I get:
>
> klips_debug:ipsec_xmit_send: ip_route_output failed with error code -22,
> dropped
>
> As with 2.6.19, I can establish a SA, ping appears on ipsec0, but there
> is still no ESP traffic. I've checked my routing at least a dozen times.
>
> If I change to protostack=netkey, it works.
>
> Could this be related to
> http://archives.free.net.ph/message/20080204.033931.c992407c.en.html?
That patch got applied a long time ago.
> I am attaching my ipsec barf. Please feel free to move this discussion
> to uses list.
I'll have a look at the barf.
Paul
More information about the Dev
mailing list