[Openswan Users] netlink XFRM_MSG_NEWPOLICY response for flow

[Paul Wouters]

On Tue, 7 Nov 2006, Marco Berizzi wrote:

> >
> > > This morning  (03:43:45) I have rebooted (for kernel
> > > update) one of my company ipsec gateway (ip_genova).
> > > Before shutting down the system, I have issued 'ipsec
> > > setup stop'. On mimosa (another ipsec gateway) I have
> > > seen this error again. Here is /var/log/secure:
> >
> > I am not sure what you are reporting here. The netlink warning?
>
> yes, I'm reporting the netlink warning.

Can you do another ipsec setup restart after your tunnel is up to
see if it happens again? If so, it looks like your kernel does not
get cleared upon stopping. So if it happens, can you do ipsec
setup stop and then an ip xfrm state list and ip xfrm policy list
to confirm that?

Paul

-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155