Re: [Swan] Valid packets dropping in the kernel

2018-11-07 Thread Dharma Indurthy
Here we go: tcpdump -n "host 12.131.93.13 or host 10.50.32.166 or host 10.253.1.53" -XXX 01:18:24.636686 IP 12.131.93.13.4500 > 172.20.109.76.4500: UDP-encap: ESP(spi=0x67526edb,seq=0x6ba46), length 100 0x: 0eef 4216 5634 0e82 073f 73ab 0800 4500 ..B.V4...?s...E. 0x0010: 0080 2acb

Re: [Swan] Valid packets dropping in the kernel

2018-11-06 Thread Dharma Indurthy
Hey, Paul. I appreciate your response. Do not use leftsourceip= if you specify more then one leftsubnet. Also, > leftsourceip= must be an IP address within the (single) leftsubnet= > > right=12.131.93.13 > > rightsubnets=" 10.50.32.166/32 10.50.32.239/32 10.50.36.4/32 " > >

Re: [Swan] Valid packets dropping in the kernel

2018-11-04 Thread Paul Wouters
On Fri, 2 Nov 2018, Dharma Indurthy wrote: Hey, folks. I have a conundrum.  It looks very similar to  https://lists.libreswan.org/pipermail/swan/2018/002834.html, which doesn't have an outcome yet, I don't think. That one looks a bit unexplained. It should not cause problems, but the poster