netdev - IPSec in tunnel mode on ARM not working

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Sat, 10 Nov 2007 12:57:13 +0100 (CET)
From:	Guennadi Liakhovetski <lg@...x.de>
To:	netdev@...r.kernel.org
Subject: IPSec in tunnel mode on ARM not working

Hi

Got two setups: with an ARM-based router and with a PC, connecting to 
a remote site using IPSec in tunnel mode over ppp. Setup is identical, 
PC works, ARM router doesn't. Kernel 2.6.23.1.

The setup looks like

PCa --- routerA ==----== routerB --- PCb

where routerA is our problematic router. We issue ping from PCa to PCb, we 
see ICMP packet coming to PCb, being answered, coming back to routerA, and 
there it doesn't get through to PCa. We see it with iptables LOG coming 
into the INPUT chain, and that's about it.

Does anyone haveexperiences with IPSec in tunnel mode on ARM? Or does 
anyone have debugging ideas? Is there a description somewhere how an 
incoming packet traverses the networking stack in such a setup?

Thanks
Guennadi
---
Guennadi Liakhovetski, Ph.D.

DENX Software Engineering GmbH,     MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-0 Fax: +49-8142-66989-80  Email: office@...x.de
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html