Re: [Ipsec-tools-devel] further development?
Brought to you by:
mit_warlord,
netbsd
From: Herbert V. R. <hv...@hv...> - 2003-08-22 09:17:43
|
On Fri, 2003-08-22 at 11:04, Michal Ludvig wrote: > uwe...@t-... told me that: > > With the current implementation I have the following problems: > > 1.) A connection is perfectly established between 2 linux partners. ssh > > to the remote client works fine. Starting a top freezes in the middle > > of the screen. Further connections are still possible, but also will > > freeze when using top again. Don't know if this is a kernel or > > userspace issue. > I can't reproduce this. I have SuSE Linux 8.2 on both sides, once with > distribution kernel 2.4.20 and freeswan.rpm and the other side runs with > 2.6.0-test3 and ipsec-tools-0.2.2. I used ssh to login there and back > several times and now also tried top and observed no problems... I also had freezing tcp sessions from time to time when using the 2.4 backport of the 2.6-ipsec implementation; but I haven't noticed this kind of freezing yet with 2.6.0-test3, but I remember people reporting freezing with previous 2.6/2.5 kernels... btw, there's also the option of using freeswan+herbert xu's patches on top of 2.6.0-test3; at least ipcomp works; also I wouldn't know how to create a road-warrior gateway for tunnels with racoon, since I'd have to setup a SPD with the road-warriors IP before the IKE negotiations start... while pluto allows dynamic endpoints even for tunnel connections; regards, -- |