Re: Is TCP over IPsec broken in 2.6.18?
From: James Morris <jmorris@namei.org>
Date: 2006-09-30 14:36:33
Possibly related (same subject, not in this thread)
- 2006-09-24 · Re: Is TCP over IPsec broken in 2.6.18? · Herbert Xu <herbert@gondor.apana.org.au>
- 2006-09-24 · Re: Is TCP over IPsec broken in 2.6.18? · James Morris <jmorris@namei.org>
- 2006-09-24 · Re: Is TCP over IPsec broken in 2.6.18? · Patrick McHardy <hidden>
- 2006-09-24 · Re: Is TCP over IPsec broken in 2.6.18? · James Morris <jmorris@namei.org>
- 2006-09-23 · Re: Is TCP over IPsec broken in 2.6.18? · Evgeniy Polyakov <hidden>
On Sat, 30 Sep 2006, Evgeniy Polyakov wrote:
I need to cofirm that broken system in my setup does have selinux enabled with enforcing mode. I've changed it to permissive mode and it fixed setup (I do not see any warnings in dmesg).
Something better in your case would likely be to rebuild the kernel with CONFIG_SECURITY_NETWORK_XFRM=n until it's fixed. - James -- James Morris [off-list ref]