(racoon 680) Re: racoon & ppc2003 Again

Aidas Kasparas <[email protected]> Tue, 31 Aug 2004 17:22:18 +0300
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <[email protected]>
> 
> spdadd 192.168.1.252[1701] 0.0.0.0/0[0] any -P out ipsec 
> esp/transport//require;
> 

This one looks suspicious to me. Especially, when I see the esp traffic 
going in other direction [too].

I would recomend adding another policy:

spdadd 0.0.0.0/0 192.168.1.252[1701] any -P in ipsec esp/transport//require;

-- 
Aidas Kasparas
IT administrator
GM Consult Group, UAB