On Fri, 12 Mar 2010 01:43:39 +0100 Claudio Jeker <[email protected]> wrote:
> On Fri, Mar 12, 2010 at 12:28:33AM +0000, Stuart Henderson wrote: > > On 2010-03-10, Massimo Lusetti <[email protected]> wrote: > > > Hi misc, > > > I got a 4.5 box which act as a perimeter ipsec routing gateway, > > > it has 682 flow (by ipsecctl -sf | wc -l). > > > > > > Some of this flow are up with a static route to the other point > > > of the ipsec tunnel and some of these routes are changing > > > dynamically (netstat shows UGHMS flags). > > > > > Wow that's a strange flag combo. Why is S & M set together? > Hmm. Another strange routing thing I need to have a loot at. > Most probably the cloning is done wrong. BTW I've settled the same default present in 4.6 for not-accepting icmp redirect and 4 days are passed without route modifications. Cheers -- Massimo
