Re: linux-ipsec: freeswan-0.90 works, then hangs

Henry Spencer wrote:
>
> > > then discovered Linux was running on only 16MB RAM. Once this was

Well.... It _was_ either memory or the fact that I replaced a Compaq Netflex III card (which uses the Texas Instruments ThunderLAN chip) with another identical card.

You may remember that a little while ago I made a post about IPsec crashing my firewall.... it appears that once the memory was set correctly (using append= in lilo.conf) and I changed the network card, things worked beautifully.

My exact problem was that eth0, my physical interface connecting to the Internet which used ipsec0 appeared to just _stop sending packets_ at certain times. These times were found to be times of "stress" on Linux.... for example, when I connected to the ftp server (and hence ftpd and sendmail were loaded), or perhaps when a lot of ipsec traffic required processing? This is why I think its more likely to be memory related.

This problem affected not only ipsec0 traffic but standard 'net traffic threough eth0, so it _may_ not be an IPsec issue. I'll be checking my append= lines from now on.

Crumbs, this is such a great product though. Here I'm establishing IPsec connections between Linux firewalls in at least five International offices. Ahhhh....

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

>
> We'll try to investigate this. Meanwhile, memory is cheap...

-- 


David S..

___ <=> ______________________________________________________
//   _     David                     Network Administrator, //
//  / \     William                 Ci Technologies Pty Ltd //
//  \_/      Sainty..                Phone: +61-2-9855-1017 //
//   |                        mailto:DavidSainty@cit.com.au //
//  /|\                         WWW: 
http://www.cit.com.au/ //
//  / \                   Proverbs 3:6 / Linux Rocks!!!!!!! //