-----BEGIN PGP SIGNED MESSAGE-----


Note:

I also see nearly identical behaviour in 1.99.x, up too and including 8 
(0.9.32).  Unless I wait until %pass's appear for the DNS servers, I get 
port specific OE %traps on any traffic I generate.  I've been working 
around it by being patient, but it still bites me every once in awhile.

I haven't seen the out of space error, but I just get a permadent %trap to 
the host, including the port/protocol.  VoIP is one that triggers this the 
most as well.

On Mon, 18 Aug 2003, Andreas Steffen wrote:

> Hi Sam,
> 
> thanks for your error report. I have the strongs suspicion that the port
> selector bug fix introduced in 1.3.36 for freeswan-2.00 and 0.9.32 for 
> freeswan-1.99:
> 
> - Fixed a port map bug which allowed all ports to be tunneled
>    through an eroute set up with port selectors.
> 
> restricts the OE eroutes to a single port. This is evident from your
> eroute listing:
> 
> 66.11.183.75/32:0  -> 205.150.200.165/32:6667 => [EMAIL PROTECTED]:0
> 
> The protocol (TCP or UDP) has been correctly reset to 0 but the port is
> restricted to 6667. When I fixed the port masks I was not considering the
> side effects this might have on OE. I'll probably get a fix ready tommorrow.
> 
> Kind regards
> 
> Andreas
> 

- -- 
Ken Bantoft                Super FreeS/WAN Maintainer
[EMAIL PROTECTED]            http://www.freeswan.ca
                           PGP Key: finger [EMAIL PROTECTED]
"We can factor the number 15 with quantum computers. We 
can also factor the number 15 with a dog trained to bark 
three times."       -- Robert Harley, 5/12/01, Sci.crypt

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBP0F2rliWUusaxGxpAQED5gQAiODolliYIdBg+gK8kj56uXePO1eiT2et
krb/O7d+xow5+U4VnkSOxGph+o31IZw5J/jChKn72E4RklsqShhLk91zmtKGGbHq
hpDGR2qXTmiMQxEugOxCBH7K0YuthW143u52a4U3A2inj3wb7Hy8HEkB1RvtsTPi
SaWtvQ7lftE=
=/0ao
-----END PGP SIGNATURE-----

_______________________________________________
FreeS/WAN Users mailing list
[EMAIL PROTECTED]
https://mj2.freeswan.org/cgi-bin/mj_wwwusr

Reply via email to