Re: compression request kills OEself?

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Paul" == Paul Wouters <[email protected]> writes:
    Paul> After upgrading to 2.x I noticed I couldn't talk to
    Paul> activeoe.freeswan.nl anymore. I find these log entries:

    Paul> Feb 14 01:34:21 bofh Pluto[1369]: "OEself"[7187] ...193.110.157.75
    Paul> #8021: compression proposed by 193.110.157.75, but policy for
    Paul> "OEself" forbids it Feb 14 01:34:21 bofh Pluto[1369]:

    Paul> Is there a reason why we don't do a connection with compression? 
    Paul> What is the "forbid" part? Would the remote end actually allow no
    Paul> compression as well?

  I do not know why this is like this.
  We should be tolerant in what we accept wrt compression. Certainly we
should be willing to accept it by default.

  I am making this a story.

    Paul> I don't think this should need to be a fatal error? And if so, then
    Paul> we need an exponential backoff from this error, because it's quite
    Paul> spammy.

  We need exponential backoff on a lot of things...

    Paul> I also get a lot of:

    Paul> Feb 14 01:38:01 bofh Pluto[1369]: "OEself"[7084]
    Paul> ...193.110.157.75===? #7918: Quick Mode I1 message is unacceptable
    Paul> because it uses a previously used Message ID 0xbce36a69 (perhaps
    Paul> this is a duplicated packet)

  Yeah... I don't have a good explanation of why this seems to happen.
  It should be a sign to give up and maybe try again from scratch.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPk+0jYqHRg3pndX9AQFxDAQAsWzPo624hJGtXS2yXl5B6aBxRMbpHEDH
jdpKvsMaAd4h5nZDoDr9q7pb1/cyxBQ9EzaBv4nxHWxVbm5QWXjpx6vzJSwZx398
hsE3MrkCpNTOTUtzIa9TDpEY0ZiSDYpiylmm8fxp8n6Q75kEGxRbw7YA5kKSjpSo
aFKJWqAyL0M=
=Otzw
-----END PGP SIGNATURE-----