Subject: Re: AH + GRE works; ESP + GRE doesn't
To: Curt Sampson <cjs@cynic.net>
From: None <itojun@iijlab.net>
List: tech-net
Date: 04/21/2003 17:01:13
>So I added this patch to a 1.6.1 system, but a) it didn't fix the
>problem of incoming packets not being seen on the gre interface if ESP
>is in use, and b) it seems to have introduced a problem that, when
>they do come in on the gre interface, they are not forwarded properly
>after that. I don't know where they go, but after being received on
>gre they do not appear to be dropped by ipfilter (I log all my block
>statements) and they are not routed out the appropriate interface.
>(Packets originating at the host do seem to be ok.)
>
>I checked the routing table with netstat -rv, and the "use" count on
>that route for that host (it's directly connected to a local interface)
>does not go up when the ICMP echo response comes back and I see it on
>the gre interface. Any idea where the packet could be going?
any interesting values on netstat -sn?
itojun