Custom Query (16363 matches)
Results (778 - 780 of 16363)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #4801 | fixed | IPSEC via NAT-Interface does not work properly in Linux Guest -> fixed in svn/3.0.8 | ||
| Description |
IPSEC from the guest does not work when the Guest is behind a NAT Interface of VBox 3.0.4. A tcpdump of the interface of the guest shows that 11 packets are transmitted to the VPN Gateway having the 217.XXX.XXX.XXX address when the connection is initialized. listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes 09:32:30.119518 arp who-has 10.0.2.2 tell 10.0.2.15 09:32:30.120196 arp reply 10.0.2.2 is-at 52:54:00:12:35:02 09:32:31.714162 IP 10.0.2.15.500 > 217.XXX.XXX.XXX.500: isakmp: phase 1 I ident 09:32:31.767945 IP 217.XXX.XXX.XXX.500 > 10.0.2.15.500: isakmp: phase 1 R ident 09:32:31.799922 IP 10.0.2.15.500 > 217.XXX.XXX.XXX.500: isakmp: phase 1 I ident 09:32:31.905178 IP 217.XXX.XXX.XXX.500 > 10.0.2.15.500: isakmp: phase 1 R ident 09:32:31.935712 IP 10.0.2.15.4500 > 217.XXX.XXX.XXX.4500: NONESP-encap: isakmp: phase 1 I ident[E] 09:32:31.935821 IP 10.0.2.15 > 217.XXX.XXX.XXX: udp 09:32:41.907620 IP 217.XXX.XXX.XXX.500 > 10.0.2.15.500: isakmp: phase 1 R ident 09:32:41.941562 IP 10.0.2.15.4500 > 217.XXX.XXX.XXX.4500: NONESP-encap: isakmp: phase 1 I ident[E] 09:32:41.941620 IP 10.0.2.15 > 217.XXX.XXX.XXX: udp ^C 11 packets captured 11 packets received by filter 0 packets dropped by kernel On the interface of the host there are only 6 packets to the VPN gateway seen in the same time. tcpdump -n -i eth0 host 217.XXX.XXX.XXX tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 09:32:24.257707 IP 217.XXX.XXX.XXX.500 > 192.168.0.22.40258: isakmp: phase 1 ? ident 09:32:30.842839 IP 192.168.0.22.40258 > 217.XXX.XXX.XXX.500: isakmp: phase 1 I ident 09:32:30.895337 IP 217.XXX.XXX.XXX.500 > 192.168.0.22.40258: isakmp: phase 1 R ident 09:32:30.928742 IP 192.168.0.22.40258 > 217.XXX.XXX.XXX.500: isakmp: phase 1 I ident 09:32:31.031873 IP 217.XXX.XXX.XXX.500 > 192.168.0.22.40258: isakmp: phase 1 R ident 09:32:41.029828 IP 217.XXX.XXX.XXX.500 > 192.168.0.22.40258: isakmp: phase 1 R ident ^C 6 packets captured 6 packets received by filter 0 packets dropped by kernel As it could be seen that the request to the IPSEC-GW on 4500/udp is not visible on the host interface. The IPSEC-Connection works properly when the guest interface is running in bridged mode. The only message regarding NAT is that ipv6 is not supported. |
|||
| #6667 | invalid | UPD Sourceport change breaks natted IPSEC-Connections | ||
| Description |
After upgrading to VBox 3.1.8 a lot of disconnects of a previously working IPSEC(nat)-Tunnel are sighted. Especially when the IPSEC connection gets a bit of a load the connection gets stuck and times out after a while.
When the traffic on the router is monitored there is a sourceport change to be seen.
07:02:09.522515 IP 91.XXX.XXX.XXX.54800 > 217.XXX.XXX.XXX.4500:
UDP-encap: ESP(spi=0xcd0add00,seq=0x76f), length 244
07:02:09.605433 IP 217.XXX.XXX.XXX.4500 > 91.XXX.XXX.XXX.54800:
UDP-encap: ESP(spi=0xcefe8399,seq=0x74d), length 340
07:02:09.606553 IP 91.XXX.XXX.XXX.54800 > 217.XXX.XXX.XXX.4500:
UDP-encap: ESP(spi=0xcd0add00,seq=0x770), length 356
07:02:09.693363 IP 217.XXX.XXX.XXX.4500 > 91.XXX.XXX.XXX.54800:
UDP-encap: ESP(spi=0xcefe8399,seq=0x74e), length 196
the connection is fine up to that point where the router suddenly sends packets using the source-port 45102 instead of the old 54800 which worked:
07:02:09.693864 IP 91.XXX.XXX.XXX > 217.XXX.XXX.XXX: ICMP 91.XXX.XXX.XXX
udp port 54800 unreachable, length 232
07:02:09.931251 IP 91.XXX.XXX.XXX.45102 > 217.XXX.XXX.XXX.4500:
UDP-encap: ESP(spi=0xcd0add00,seq=0x772), length 356
07:02:10.018333 IP 217.XXX.XXX.XXX.4500 > 91.XXX.XXX.XXX.54800:
UDP-encap: ESP(spi=0xcefe8399,seq=0x74f), length 116
07:02:10.018649 IP 91.XXX.XXX.XXX > 217.XXX.XXX.XXX: ICMP 91.XXX.XXX.XXX
udp port 54800 unreachable, length 152
07:02:10.029414 IP 217.XXX.XXX.XXX.4500 > 91.XXX.XXX.XXX.54800:
UDP-encap: ESP(spi=0xcefe8399,seq=0x750), length 196
07:02:10.029914 IP 91.XXX.XXX.XXX > 217.XXX.XXX.XXX: ICMP 91.XXX.XXX.XXX
udp port 54800 unreachable, length 23 |
|||
| #12070 | invalid | Linux Kernel 3.9 crash on VirtualBox 4.3 BETA on Windows 8 host | ||
| Description |
[ 0.000000] tsc: Fast TSC calibration failed :: running early hook [udev] :: running hook [udev] :: Trigger[ 0.800126] divide error: 0000 [#1] PREEMPT SMP [ 0.803406] Modules linked in: ata_piix(+) ahci(+) libahci ehci_pci(+) ohci_hcd(+) ehci_hcd usbcore usb_common libata scsi_mod [ 0.803406] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 3.10.7-1-ARCH #1 [ 0.803406] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006 [ 0.803406] task: ffffffff81814440 ti: ffffffff81800000 task.ti: ffffffff81800000 [ 0.803406] RIP: 0010:[<ffffffff81398e2b>] [<ffffffff81398e2b>] intel_pstate_timer_func+0xbb/0x2c0 [ 0.803406] RSP: 0018:ffff88003fc03e38 EFLAGS: 00010246 [ 0.803406] RAX: 0000000000000000 RBX: ffff88003ccc1200 RCX: ffff88003ccc1308 [ 0.803406] RDX: 0000000000000000 RSI: ffff88003fc03e3c RDI: ffff88003ccc1300 [ 0.803406] RBP: ffff88003fc03e58 R08: 0000000000000000 R09: ffffffff81aa0f81 [ 0.803406] R10: 0000000000000004 R11: 0000000000000005 R12: 3ccc120081801fd8 [ 0.803406] R13: 81801fd881801fd8 R14: ffffffff81398d70 R15: ffff88003ccc1200 [ 0.803406] FS: 0000000000000000(0000) GS:ffff88003fc00000(0000) knlGS:0000000000000000 [ 0.803406] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 0.803406] CR2: 00007ff5b83ee000 CR3: 000000003cd2b000 CR4: 00000000000006f0 [ 0.803406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 0.803406] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 0.803406] Stack: [ 0.803406] fffffffb3fc03e70 ffffffff81aa0f80 ffff88003ccc1248 0000000000000101 [ 0.803406] ffff88003fc03e90 ffffffff81065536 ffffffff81aa0f80 000000000000005a [ 0.803406] ffffffff81398d70 0000000000000000 ffff88003ccc1248 ffff88003fc03f00 [ 0.803406] Call Trace: [ 0.803406] <IRQ> [ 0.803406] [<ffffffff81065536>] call_timer_fn+0x36/0x190 [ 0.803406] [<ffffffff81398d70>] ? intel_pstate_set_pstate+0x110/0x110 [ 0.803406] [<ffffffff81065ac4>] run_timer_softirq+0x214/0x2d0 [ 0.803406] [<ffffffff8105dbef>] __do_softirq+0xef/0x2b0 [ 0.803406] [<ffffffff8105df06>] irq_exit+0x86/0xb0 [ 0.803406] [<ffffffff814d17ae>] smp_apic_timer_interrupt+0x6e/0x9c [ 0.803406] [<ffffffff814d061d>] apic_timer_interrupt+0x6d/0x80 [ 0.803406] <EOI> [ 0.803406] [<ffffffff81041ed6>] ? native_safe_halt+0x6/0x10 [ 0.803406] [<ffffffff8101bb5f>] default_idle+0x1f/0x140 [ 0.803406] [<ffffffff8101c5f6>] arch_cpu_idle+0x26/0x30 [ 0.803406] [<ffffffff810a6e67>] cpu_startup_entry+0x257/0x2d0 [ 0.803406] [<ffffffff814a8df4>] rest_init+0x84/0x90 [ 0.803406] [<ffffffff818d9ee8>] start_kernel+0x414/0x420 [ 0.803406] [<ffffffff818d98dd>] ? repair_env_string+0x5c/0x5c [ 0.803406] [<ffffffff818d9120>] ? early_idt_handlers+0x120/0x120 [ 0.803406] [<ffffffff818d95dc>] x86_64_start_reservations+0x2a/0x2c [ 0.803406] [<ffffffff818d96d1>] x86_64_start_kernel+0xf3/0x100 [ 0.803406] Code: 29 81 f0 00 00 00 4c 89 e8 48 2b 83 d8 00 00 00 48 89 81 f8 00 00 00 48 8b 47 10 48 8d 4f 08 48 8d 04 80 48 8d 04 80 48 c1 e0 02 <48> f7 71 10 69 f0 e8 03 00 00 0f af b3 a8 00 00 00 89 71 18 89 [ 0.803406] RIP [<ffffffff81398e2b>] intel_pstate_timer_func+0xbb/0x2c0 [ 0.803406] RSP <ffff88003fc03e38> ing uevents... [ 3.864765] ---[ end trace 1daccd52295a6ba9 ]--- [ 3.865198] Kernel panic - not syncing: Fatal exception in interrupt |
|||

