Re: kern/121374: [ipsec] SP refcnt increases with each packet in ipv6 with new IPSEC

2008-03-12 Thread Cyrus Rahman
> Synopsis: [ipsec] SP refcnt increases with each packet in ipv6 with new IPSEC > > Wait for feedback if the patch presented is fine. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=121374 Ok, I've tested this patch. Exchanging packets through a policy works after a fashion, but after sending on

Re: ipv6 + ah + esp

2008-03-04 Thread Cyrus Rahman
> > Is there a known problem running ah+esp on ip6? I can set up an > > association and run ah+esp just fine on ip4, > > and ah or esp work well by themselves in ip6, but I've had no luck > > with combining them on ip6. > > 22 is EINVAL. > > The same error message is there twice in sys/netin

ipv6 + ah + esp

2008-03-04 Thread Cyrus Rahman
Is there a known problem running ah+esp on ip6? I can set up an association and run ah+esp just fine on ip4, and ah or esp work well by themselves in ip6, but I've had no luck with combining them on ip6. I know that ipcomp is documented to be broken but I haven't seen anything about this problem.