[Openswan Users] IPSec, Windows XP/2000 and Dead Peer Detection

[Paul Wouters]

On Thu, 13 Oct 2005, Andrej Trobentar wrote:

> Jacco de Leeuw wrote:
>>
>> At least, that is the theory. Are you using kernel 2.4 by any chance?
>> I have had some issues with kernel 2.4 not tearing down the IPsec SAs.
>> But I have not used kernel 2.4 much since I have upgraded.
>
> Yes, I'm using kernel 2.4.31. I can't upgrade to any other kernel,
> because I have a Sundance Multiport ethernet card and the module works
> only under this version - under others it locks the server :(

A new dr should be released today that address a bug on 2.4.31 kernels and
NAT-T. Perhaps that will fix your problem.

Paul