Subject: Re: port bound SAs

From: David Miller <[email-masked]>
Date: Tue, 27 Jan 2009 09:21:14 -0800 (PST)

From: "Paul Moore" <[email-masked]>
Date: Tue, 27 Jan 2009 09:13:46 -0800

> the pfkey / xfrm interface throws them away
> 
> i fixed racoon to send the port numbers and they were ignored

Did you actually try "ip xfrm" as Patrick suggested?

Where exactly are the ports "thrown away" for both pfkey and xfrm
cases?