[Openswan dev] ip_hdr discrepancies

Paul Wouters paul at xelerance.com
Fri Dec 19 20:05:24 EST 2008

On Sat, 20 Dec 2008, Sybille Ebert wrote:

> > Yeah, that was fixed and you can see it in openswan 2.6.20rc1
> Yes, it compiles now.

> Now the "shunt SA of DROP or no eroute" is gone, but I get:
> klips_debug:ipsec_xmit_send: ip_route_output failed with error code -22,
> dropped
> As with 2.6.19, I can establish a SA, ping appears on ipsec0, but there
> is still no ESP traffic. I've checked my routing at least a dozen times.
> If I change to protostack=netkey, it works.
> Could this be related to
> http://archives.free.net.ph/message/20080204.033931.c992407c.en.html?

That patch got applied a long time ago.

> I am attaching my ipsec barf. Please feel free to move this discussion
> to uses list.

I'll have a look at the barf.


More information about the Dev mailing list