Dead loop on netdevice ipsec0, fix it urgently!

Hi,

I get this error on my firewall-vpn-server

Dead loop on netdevice ipsec0, fix it urgently!

Any ideas where this come from?

Thanks!

Nicole

What is your ruleset (specifically, any nat rules, and any rules applying to interface ipsec0)?

http://www2.frell.ambush.de/archives/freeswan-users/4677.html

Regards,

Antony.

Most people have more than the average number of legs.

                                                     Please reply to the list;
                                                           please don't CC me.

I have no nat rules on interface ipsec0.
There is only one rule on this interface.
It's all allowed.

I have nat rules only for a little group of pcs and a proxy and they are only for surfing.

Thanks!

Nicole

I got this cryptic message when I modified ESP packet in mangle table. Rule like "iptables -t mangle -A OUTPUT -p 50 -j TOS --set-tos 0x10" is able to make klips (1.99.x) mad.