compression request kills OEself?
Paul Wouters <[email protected]>
| Newsgroups | gmane.network.freeswan.devel |
|---|---|
| Message-ID | <[email protected]> |
After upgrading to 2.x I noticed I couldn't talk to activeoe.freeswan.nl anymore. I find these log entries: Feb 14 01:34:21 bofh Pluto[1369]: "OEself"[7187] ...193.110.157.75 #8021: compression proposed by 193.110.157.75, but policy for "OEself" forbids it Feb 14 01:34:21 bofh Pluto[1369]: "OEself"[7187] ...193.110.157.75 #8021: no acceptable Proposal in IPsec SA Feb 14 01:34:21 bofh Pluto[1369]: "OEself"[7187] ...193.110.157.75: deleting connection "OEself" instance with peer 193.110.157.75 Is there a reason why we don't do a connection with compression? What is the "forbid" part? Would the remote end actually allow no compression as well? I don't think this should need to be a fatal error? And if so, then we need an exponential backoff from this error, because it's quite spammy. Also note that I have absolutely no connection now to that machine, not cleartext and not crypted, because both ends keep on trying to do OE. I also get a lot of: Feb 14 01:38:01 bofh Pluto[1369]: "OEself"[7084] ...193.110.157.75===? #7918: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xbce36a69 (perhaps this is a duplicated packet) and Feb 14 01:38:23 bofh Pluto[1369]: "OEself"[7084] ...193.110.157.75===? #7918: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xe99acddc (perhaps this is a duplicated packet) Paul -- God devised pigeons as a means of punishment for man. Probably after the destruction of Sodom and Gomorrha he wanted to make sure that people would never again feel comfortable enough in a city to repeat the sins committed there, and he created the pigeons as a means to make the city dwellers' lives more miserable, as a constant reminder of their past sins.