Re: [ipsec routing] IP frame is sent to the wrong IPSEC peer when using srcnat, but should be routed to the network with the most narrow netmask.

2011-07-19 Thread Stuart Henderson
On 2011/07/19 21:45, Markus Friedl wrote: > All OpenBSD versions should have this problem as it's due to the way how > IPsec-flows are encoded in the routing table and I could not find and easy > fix. The easiest fix if you control both ends is probably to just use gif(4) tunnels. For people who

Re: [ipsec routing] IP frame is sent to the wrong IPSEC peer when using srcnat, but should be routed to the network with the most narrow netmask.

2011-07-19 Thread Markus Friedl
All OpenBSD versions should have this problem as it's due to the way how IPsec-flows are encoded in the routing table and I could not find and easy fix. On Tue, Jul 19, 2011 at 2:28 PM, Pawel Wieleba wrote: > To: gn...@openbsd.org > Subject: [ipsec routing] IP frame is sent to the wrong IPSEC p

[ipsec routing] IP frame is sent to the wrong IPSEC peer when using srcnat, but should be routed to the network with the most narrow netmask.

2011-07-19 Thread Pawel Wieleba
To: gn...@openbsd.org Subject: [ipsec routing] IP frame is sent to the wrong IPSEC peer when using srcnat, but it should be routed to the network with the most narrow netmask. From: p.wiel...@iem.pw.edu.pl Cc: bugs@openbsd.org Reply-To: p.wiel...@iem.pw.edu.pl >Synopsis: [ipsec routing] IP f