Subject: Re: IPSec broken in 2.6.18-rc4-mm3

From: Patrick McHardy <[email-masked]>
Date: Fri, 08 Sep 2006 21:52:33 +0200

Gnome42 Gnome42 wrote:
> IPSec got broken in 2.6.18-rc4-mm3+, 2.6.18-rc4-mm2 works and
> 2.6.18-rc5 also works.
> 
> The tunnel looks like its established correctly in the racoon logs and
> the traffic is encrypted on the wire. However, the other side does not
> decrypt the traffic it just seems to disappear.

Can you see the decrypted packets on the incoming interface on the
other side?

> I have confirmed this problem exists between two linux boxen and a
> Netopia router as well.
> 
> The git-net.patch increased in size by about 50% between
> 2.6.18-rc4-mm2 and 2.6.18-rc4-mm3 (likely suspect?), but i was unable
> to simply patch -R it cleanly.
> 
> Suggestions?

Please post your policies and related SAs from both sides.
Are you using NAT, iptables or anything like that?