[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-bugs
Subject:    Re: kernel/887
From:       "Angelos D. Keromytis" <angelos () dsl ! cis ! upenn ! edu>
Date:       1999-07-31 0:17:42
[Download RAW message or body]


In message <199907310013.SAA23080@cvs.openbsd.org>, "Angelos D. Keromytis" writ
es:
>Synopsis: route flush -encap doesn't work
>
>State-Changed-From-To: open-closed
>State-Changed-By: angelos
>State-Changed-When: Fri Jul 30 18:11:15 MDT 1999
>State-Changed-Why: 
>This wasn't a bug, see attached explanation on "fix".

I was hoping that the whole pr would be sent out; this is what I wrote in the
fix section:

        This isn't broken; "route flush -encap" deletes the "filter" entries
        from the routing table (in IPsec lingo, the `SPD entries'). It
        does not affect the SAs at all. To delete SAs, you have to use
        the "ipsecadm -delete" command, or (soon) the "ipsecadm flush"
        command.

-Angelos

[prev in list] [next in list] [prev in thread] [next in thread]