Re: Fw: [Bugme-new] [Bug 4138] New: ipsec with racoon in transport mode with esp and ah hangs (problem is in xfrm_state_add)
From: "David S. Miller" <davem@davemloft.net>
Date: 2005-01-31 19:40:04
On Mon, 31 Jan 2005 21:54:33 +1100 Herbert Xu [off-list ref] wrote:
Well without the check we would have silently ignored the sequence number which is why you wouldn't have noticed the problem with racoon before. However, for those who need to use the sequence number this check is necessary.
Yes, but the loop in the kernel must be prevented nevertheless, buggy userland or not.