[Openswan Users] Compression with Linux kernel 2.6

[Phillip T. George]

Herbert Xu wrote:

>Phillip T. George <phillip at eacsi.com> wrote:
>  
>
>>This information was pulled from:
>>http://www.openswan.org/docs/local/README.Kernel26
>>
>>"
>>* compression seems to be incompatible between KLIPS and the 2.6 ipsec 
>>code. Since we believe the 2.6 ipsec code is wrong, we cannot fix this. 
>>If you get a successful IKE negotiation and can send ESP packets, but 
>>never get replies, compile KLIPS without CONFIG_IPSEC_IPCOMP. There is 
>>currently no runtime switch to disable compression. Note that setting 
>>compress=no is not enough; it just means we do not announce compression, 
>>but we'll still do it if the other end requests it.
>>"
>>    
>>
>
>  
>
>>So the question is, as stated above: Is there a work around or a direct 
>>fix on getting compression to work with kernel version 2.6?
>>    
>>
>
>Just ignore it, it's totally wrong.
>
>Cheers,
>  
>

Strange.  I can only get a GOOD connection if I turn compression off on 
both sides.  Otherwise I can only get a small amount of data between 
both points.  (2 FC3 firewalls with same software versions of everything)

-Phillip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20050511/7f7e6cdd/attachment.htm