Re: ipsec questions/bugs/fixes (PF_KEY/PF_ENCAP)

[Markus Friedl <markus.friedl@informatik.uni-erlangen.de>]

On Tue, Mar 02, 1999 at 12:03:30PM -0500, Niels Provos wrote:
> You forgot to specify the IV for the transforms. PF_ENCAP was
> able to do IV-less mode by deriving an IV from the packet headers.
> We dont do that any more with PFKEYv2.
> So just modify your scripts to include a -iv line:

thanks, now it works.
i had to specify an IV for NEW_ESP on the PF_ENCAP machine.

-markus