[VPN] X*X*X administrivia

[Tina Bird]

*sigh*

many list members' mail servers have bounced this message due to its
offensive content.

now, i find failed security associations as offensive as the next person,
maybe even more offensive than the next person, but i don't think they're
worth bouncing emails due to content filtering ;-)

two points:

1) if you want to hide IP addresses, choosing masks other than x-x-x is
probably a good idea if you don't want to trigger this sort of problem
2) management retains the right to arbitrarily unsubscribe list members
whose mail servers send me excessive numbers of bounce messages (where
excessive is defined by, oh, the kind of week i've had at work)

back to regular programming -- tbird

-- 
"I knew it! I knew it! Well, not in the sense of having the slightest
idea, but I knew there was something I didn't know."
                                 -- Willow, from "Buffy the Vampire Slayer"

http://www.shmoo.com/~tbird
Log Analysis http://www.loganalysis.org
VPN http://vpn.shmoo.com

---------- Forwarded message ----------
Date: Fri, 4 Apr 2003 12:45:41 -0600
From: Randy Sargent <rrsarge at medclinic.net>
To: "vpn at lists.shmoo.com" <vpn at lists.shmoo.com>
Subject: [VPN] Decapsulated packet does not match tunnel id

SEF 7.0/Win2K PRO/SP2

I have one particular tunnel with a SonicWALL SOHO2 that is giving me fits.
It will work fine for a little while and then I get this:

IP packet dropped (192.168.10.78->10.0.0.3: Protocol=TCP[SYN] Port
4802->80): Decapsulated packet does not match tunnel id
6.isakmp.1414 at xxx.xxx.xxx.xxx <S2S_ABC>

This is driving me nuts! Has anyone seen this before?

Randy Sargent