Re: encap routes

2007-04-16 Thread Joachim Schipper
On Mon, Apr 16, 2007 at 05:52:05PM +0200, Markus Wernig wrote:
> Hi all
> 
> Does anybody know what the status of the problem described here is?
> 
> http://archives.neohapsis.com/archives/openbsd/2005-12/0327.html
> 
> The problem is that OBSD IPSec gateways will reject packets they have an
> SA for if they don't have an IP route to the destination (any route,
> default gw will suffice).
> Is it planned to be change the default behaviour?

Quite possibly not. Why? What is the problem?

Joachim

-- 
TFMotD: arp (4) - Address Resolution Protocol



encap routes

2007-04-16 Thread Markus Wernig
Hi all

Does anybody know what the status of the problem described here is?

http://archives.neohapsis.com/archives/openbsd/2005-12/0327.html

The problem is that OBSD IPSec gateways will reject packets they have an
SA for if they don't have an IP route to the destination (any route,
default gw will suffice).
Is it planned to be change the default behaviour?

thx /markus