Sparc 32/64 - freeswan - iptables

Hi,

when I try to use freeswan on my sparcs, I have the following problems:

1) freeswan+iptables crashes the system on sparc 32
2) freeswan does not work on ethX interfaces but on ppp0
3) freeswan crashes the system on sparc64

1)for half a year I have been trying to make freeswan work on
my Sparc Station 5 or Ultra 1. I used several kernel and freeswan versions. A few days ago, I found out that it works on my ppp0 (pppoe) interface, but not on ethX interfaces.
The problem is, that ipsec is stable on the sparc 32 as long as the
netfilter
code is not in the kernel. As soon as I load the iptable modules (or ipchains) the machine crashes without any message when I use the tunnel, even if there are no rules in place. Iptables without ipsec works fine.
I compiled all the code into the kernel, but it had no effect. The same configuration works well on my Intel machine.
I am currently using 2.4.20-rc1 with freeswan-2.00 or 1.98b.

2) When I use ipsec over an ethX interface, the ipsec interface drops the outgoing packets and reports an error. As far as I found out, the ip_route_output call in line 1898 of ipsec_tunnel.c returns an error.I am not able to get the errorcode returned, because the system crashes when I try to print it out. I have the same problem on the 32 bit and 64 bit platform. I posted that problem in the freeswan lists a while ago, but nobody could help me.

3)I patched sys_ioctl32.c on the ultra (horrible hack I suppose,
I'm no C-programmer). On ppp0 the sparc 64 is able to establish an ipsec connection, but crashes as soon as I try to use the tunnel.

Can anyone help me to solve one of my problems?

Thanks in advance
Georg Chini

The question seems off-topic on the generic kernel mailinglist then.

freeswan is developed outside the kernel and not part of the kernel, it has it's own mailinglists (see http://www.freeswan.org).

Netfilter/iptables _is_ part of the kernel but also has it's own development-oriented mailinglist ([email protected])

From my (netfilter) point of view: netfilter and iptables work on both sparc32 and sparc64. There's a single known bug in the sparc64 iptables implementation, but it's only about the per-rule packet and byte counters.

As long as there's nobody pointing me more directly to a particular issue, no. Sorry. I don't have the time to test freeswan on a sparc system.

Live long and prosper
- Harald Welte / [email protected]               http://www.gnumonks.org/
============================================================================
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000