Hi,

thank you for your answer!

On Sat, 19.09.2009 at 12:11:43 +0000, Stuart Henderson <s...@spacehopper.org> 
wrote:
> SADB entries are not normal routing table entries, they take priority.

This is what I suspected. But even given those IPSEC semantics (they
are documented where, please?), the 172.22/16 network lies on the LAN
and not on the WAN side of things. I also don't see how traffic from
different locations would be able to reach the LAN, if it weren't, and,
most confusingly, although I forgot to mention this in my earlier
posts, DHCP works. I can make the gateway a DHCP server, and it can
deal out leases to the LAN, but it cannot answer a ping, nor an NTP or
DNS packet. This leads to the idea that the operating system already
knows how to route packets correctly, and therefore, I suspected the
observed behaviour to be a bug.


Kind regards,
--Toni++

Reply via email to