<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
<BR> --Forwarded Message Attachment--<BR>From: michalle_oy@hotmail.com<BR>To: dev@lists.strongswan.org<BR>Subject: Is that a security Issue?<BR>Date: Sun, 19 Sep 2010 08:19:18 +0000<BR><BR>
<META content="Microsoft SafeHTML" name=Generator>
<STYLE>
.ExternalClass .ecxhmmessage P
{padding:0px;}
.ExternalClass body.ecxhmmessage
{font-size:10pt;font-family:Tahoma;}
</STYLE>
Hi all, <BR>I am a strongswan newbie. I recently implement a IPsec/Ikev2 and want to do the interoperibility test with <BR>strongswan by Tunnel mode. The issue is that after the SA for tunnel mode established bewteen <BR>my implemenationand and strongswan, my implementation use the vitrual IP (192.168.201.1) ping strongswan (192.168.200.2), <BR>there will be a plain text of ICMP echo request (which decrypyt the orignial ESP packet from my implementation) in the network. <BR>And this package was sent by strongswan. Is that a security issue, since it is dangerous to decryption the packet and send out it.<BR>I have attached the test scenario, the ipsec.conf file and the packets captured by wireshark. I just give a sample base on the <BR>IPv4 , the IPv6 has the same issue. <BR> <BR>StrongSwan version: 4.2.4-5ubuntul<BR> <BR>Thank<BR>Michalle<BR> <BR> <BR><BR> </body>
</html>