(racoon2 67) Re: racoon2 bugs?

Thanks for your help!

I tried with protecting TCP packets only and I tested with iperf tool.
It works!

For my previous request, I don't know where the DNS occurs. I PING6 with
IP6 address (and not with host name). Moreover, I don't remember DNS
request appeared in TCPDUMP log. By precaution, I add "resolver
{ resolver off; };" in my configuration file. I must test explicit
allowing to know some more.

I don't think protecting ICMP6 causes problem in my case because my
protection is applied on global addresses and neighbor discovery packets
are sent with local-link address (I verified that these packets were not
dropped).

Are there documents that describe racoon implementation (like
wide-draft-ipsec-report2004-01 in English)?

Best Regards.

Franck GILLET.
[email protected]


Le mercredi 22 mars 2006 =C3=A0 13:54 +0900, Fukumoto Atsushi a =C3=A9cri=
t :
> Franck, I think node A is trying DNS but it is blocked.  Could you try
> with more selective security policy (protect TCP packets only, for
> example), or explicity allow DNS packets?  Also note that if you try
> to protect ICMP, you'll block Neighbor Discovery packets which needs
> to be sent in plain to perform IKE communication.
>=20
>=20
> 					FUKUMOTO Atsushi
> 					[email protected]