Re: Behaviour of IPsec when there are two flow-pairs between same gateways?

I wrote:
>
>I just installed OpenBSD v3.2 on two test systems and repeated my test.
>
>I *still* see the same problem.

Markus Friedl <markus@openbsd.org> wrote:

> i don't see this problem with openbsd 3.2.

"Angelos D. Keromytis" <angelos@cs.columbia.edu> wrote:

> The behavior I described occurs if you use "ipsecadm flow" to setup the flows,

Alas, the application where I'm encountering this bug is a firewall/VPN appliance (www.ml-ip.com) that uses pre-shared keys and flows created by isakmpd based on entries in isakmpd.conf.

We can't easily change to using pre-installed flows, and end-users certainly can't (long-term we probably will have to change over to doing that, however, requiring a fairly major product rewrite).

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

--cjb Received on Mon Jan 27 20:53:47 2003