Sparc 32/64 - freeswan - iptables

Sparc 32/64 - freeswan - iptables

[Georg Chini]

Hi,

when I try to use freeswan on my sparcs, I have the following problems:

1) freeswan+iptables crashes the system on sparc 32
2) freeswan does not work on ethX interfaces but on ppp0
3) freeswan crashes the system on sparc64

1)for half a year I have been trying to make freeswan work on
   my Sparc Station 5  or Ultra 1.  I used several kernel  and
   freeswan versions. A few days ago, I found out that it works
   on my ppp0 (pppoe) interface, but not on ethX interfaces.
  The problem is, that ipsec is stable on the sparc 32 as long as the 
netfilter
  code is not in the kernel.  As soon as I load the iptable modules
  (or ipchains) the machine crashes without any message when
  I use the tunnel, even if there are no rules in place.
  Iptables without ipsec works fine.
  I compiled all the code into the kernel, but it had no effect.
  The same configuration works well on my Intel machine.
  I am currently using 2.4.20-rc1 with freeswan-2.00 or 1.98b.

2) When I use ipsec over an ethX interface,  the ipsec interface drops the
     outgoing packets and reports an error. As far as I found out, the
     ip_route_output call in line 1898 of ipsec_tunnel.c returns an
    error.I am not able to get the errorcode returned, because the
    system crashes when I try to print it out. I have the same problem
    on the 32 bit and 64 bit platform. I posted that problem in the freeswan
    lists a while ago, but nobody could help me.

3)I patched sys_ioctl32.c on the ultra (horrible hack I suppose,
    I'm no C-programmer). On ppp0 the sparc 64 is able to establish
    an ipsec connection, but crashes as soon as I try to use the tunnel.
   
Can anyone help me to solve one of my problems?

Thanks in advance
                                    Georg Chini

Re: Sparc 32/64 - freeswan - iptables

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1311 bytes --]

On Mon, Nov 04, 2002 at 12:17:26AM +0100, Georg Chini wrote:
> Hi,
> 
> when I try to use freeswan on my sparcs, I have the following problems:

The question seems off-topic on the generic kernel mailinglist then.

freeswan is developed outside the kernel and not part of the kernel, it
has it's own mailinglists (see http://www.freeswan.org).

Netfilter/iptables _is_ part of the kernel but also has it's own
development-oriented mailinglist (netfilter-devel@lists.netfilter.org)

From my (netfilter) point of view:  netfilter and iptables work on both
sparc32 and sparc64.  There's a single known bug in the sparc64 iptables
implementation, but it's only about the per-rule packet and byte counters.

> Can anyone help me to solve one of my problems?

As long as there's nobody pointing me more directly to a particular issue,
no. Sorry.  I don't have the time to test freeswan on a sparc system.

> Thanks in advance
>                                     Georg Chini
-- 
Live long and prosper
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]