From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Oct 25 23:18:17 2006
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id k9PEIHP53938;
	Wed, 25 Oct 2006 23:18:17 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mbox-o00.iijmio.jp (mbox-o00.iijmio.jp [210.138.144.205])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id k9PEIGw53931
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 25 Oct 2006 23:18:17 +0900 (JST)
	(envelope-from hideishi@magisystem.net)
Received: MIO O00 id k9PEIE0q013156; Wed, 25 Oct 2006 23:18:15 +0900 (JST)
Received: from melchior.magisystem.net (204.57.138.210.xn.2iij.net [210.138.57.204])
	by mbox.iijmio-mail.jp (MMS-MR/mms-r01) id k9PEIEfn002613
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NOT)
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 25 Oct 2006 23:18:14 +0900 (JST)
Received: from [192.168.2.2] (240.82.30.125.dy.iij4u.or.jp [125.30.82.240])
	(authenticated bits=0)
	by melchior.magisystem.net (8.13.6/8.13.6) with ESMTP id k9PEICEk022816
	(version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO)
	for <FreeBSD-net-jp@jp.FreeBSD.org>; Wed, 25 Oct 2006 23:18:13 +0900 (JST)
	(envelope-from hideishi@magisystem.net)
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Transfer-Encoding: 7bit
Message-Id: <03BA6E10-AA21-43C3-BD5E-15199F9B9163@magisystem.net>
Content-Type: text/plain; charset=ISO-2022-JP; delsp=yes; format=flowed
To: FreeBSD-net-jp@jp.FreeBSD.org
From: Hidenori Ishikawa <hideishi@magisystem.net>
X-Mailer: Apple Mail (2.752.2)
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
Date: Wed, 25 Oct 2006 23:18:10 +0900
X-Sequence: FreeBSD-net-jp 4202
Subject: [FreeBSD-net-jp 4202] FreeBSD 4.11
 =?ISO-2022-JP?B?GyRCJEcbKEI=?= racoon(NAT-T)
 =?ISO-2022-JP?B?GyRCJHI7SCQmJEskTxsoQg==?=
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: hideishi@magisystem.net
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

$B@P@n!w(BMAGI-SYSTEM$B$G$9!#(B

FreeBSD 4.11$B$K(Bracoon$B$rF~$l$F!"(BNAT-T$B$rM-8z$K$7$?$$$H(B 
$B;W$C$F$$$k$s$G$9$,!"(B
phase1$B40N;8e!"(BUDP-encap ESP$B$K@Z$jBX$($F(Bphase2$B$KF~$k(B 
$B$H$3$m$,(B
$B$J$+$J$+$&$^$/9T$-$^$;$s!#(B

racoon$B$N%m%0$G$O!"(Bupdate_nat$B$,(BInvalid argument$B$rJV$7(B 
$B$F$$$k$N$G!"(B
$B$I$&$b(Bkernel$B$G(BNAT-T$B$rM-8z$K$9$k$H$3$m$G<:GT$7$F$$$k(B 
$B$h$&$G$9!#(B

NAT$B$r2p$5$J$$@\B3$O$&$^$/$G$-$F$$$k$N$G!"(Bkernel$B$G(BNAT- 
T$B$r;H$($k(B
$B$h$&$K$9$k$H$3$m$,$^$:$$$N$+$b$7$l$^$;$s!#(B
$B!J:#;~(B4$B7ONs$r;H$&$N$,0-$$$N$+$b$7$l$^$;$s$,!D!K(B

$B2?$+$d$jJ}$,4V0c$C$F$$$k$H$3$m$,$"$k$H$+!"(B
kernel$B$N$I$3$=$3$r$4$K$g$4$K$g$9$l$P$$$$$H$+!"(B
$BJ,$+$kJ}$O$$$^$;$s$G$7$g$&$+!#(B

$B!Z<j=g![(B
1. http://ipsec-tools.sourceforge.net/freebsd_nat-t.diff
    $B$rMn$H$7$F$-$F!"(B/usr/src/sys$B$KEv$F$k!#(B
2. kernel$B$r:n$jD>$9!#(B
3. /usr/src/sys$B$G%Q%C%A$NEv$?$C$?%X%C%@%U%!%$%k$r(B
    /usr/include$B$K%3%T!<!#(B
4. ports$B$+$i(Bipsec-tools$B$rF~$l$k!#!J(BNAT-T$BM-8z!K(B
5. $B:F5/F0(B
6. racoon$B$r<B9T!#(B

$B!Z(Bracoon$B$N%m%0![(B
2006-10-25 22:54:09: DEBUG: KEYMAT computed.
2006-10-25 22:54:09: DEBUG: call pk_sendupdate
2006-10-25 22:54:09: DEBUG: encryption(aes)
2006-10-25 22:54:09: DEBUG: hmac(hmac_sha1)
2006-10-25 22:54:09: DEBUG: call pfkey_send_update_nat
2006-10-25 22:54:09: ERROR: libipsec failed send update_nat (Invalid  
argument)
2006-10-25 22:54:09: ERROR: pfkey update failed.
2006-10-25 22:54:09: ERROR: failed to process packet.
2006-10-25 22:54:09: ERROR: phase2 negotiation failed.
2006-10-25 22:54:09: DEBUG: an undead schedule has been deleted.
2006-10-25 22:54:09: ERROR: the length in the isakmp header is too big.
2006-10-25 22:54:11: ERROR: the length in the isakmp header is too big.
2006-10-25 22:54:11: ERROR: the length in the isakmp header is too big.
$B!J0J2<N,!K(B

--
Hidenori Ishikawa
<hideishi@magisystem.net>

