Re: [Ipsec-tools-devel] Bug in racoon?

[Wilfried W. <Wil...@gm...>]

enokihara hideshi wrote:
> Hi all,
> 
> I'm using the ipsec-tools 0.6.5.
> And I'm facing a problem with the racoon.
> 
> My configuration of tne racoon is like follow.

Hi,

I have attached a part of a patch that I did for ipsec-tools 0.6.4 to 
fix my transport mode problems. Similar changes were made in 0.6.5 but 
at least the IPv6 part was not done. IPv6 was never tested with my patch 
but you still may want to give it a try. Also make sure that you are not 
using the "--enable-natt" configure option. The Debian Linux testing 
ipsec-tools package uses this flag and the inbound ISAKMP negotiations 
fail. Outbound ISAIMP is no problem on debian.

To Yvan:
Will the getsainfo-logging-part of my patch be integrated into 0.6.6? If 
the above problem is that what I fixed in the patch then it should have 
been obvious to find out what went wrong on by looking at the logs.

Greetings,
Wilfried