(racoon 83) generate_policy for anonymous connections

[Frederik Seiffert <lists.kame.racoon@equinux.de>]

Hi there!

First of all: thanks a lot for your hint with the "unique" SPD entries! It 
seems to work quite well now.

Now I've got another problem (still using KAME/racoon from Mac OS X):
I'm trying to allow a server to accept connections from clients with 
dynamically assigned IP addresses. I've created suitable anonymous remote 
and sainfo blocks in my racoon.conf (exchange_mode aggressive, 
my_identifier and peers_identifer as FQDN with pre-shared keys) and set 
"passive on" and "generate_policy on". The connection comes up without 
problems ("IPsec-SA established"), however, the SPD entries are not being 
generated.
racoon says: "no policy found, try to generate the policy : 
192.168.40.111/32[0] 192.168.1.0/24[0] proto=any dir=in"
But no such thing seems to happen. setkey -DP returns nothing. If I 
manually add suitable in- and outbound policies, it all works as expected.

Am I misinterpreting the generate_policy option?

Thanks a lot!
Frederik