[Openswan Users]

[sasa]

"Paul Wouters" wrote:

> Run 'ipsec --version'. Does it say it is using klips or netkey? My guess 
> is that
> klips did not load. For instance, this could happen because you compiled 
> klips
> for 2.6.9-1.667 but you are running a different kernel (another version or 
> perhaps
> the smp version of 2.6.9-1.667)

#ipsec --version
Linux Openswan 2.4.4 (klips)

...and then I have the ipsec0 interface.

I am sorry for my distraction but in my previous mail I have written:

>rpm -ivh kernel-2.6.12-1.1381_FC3_src.rpm

..but I wanted to write:

rpm -ivh kernel-2.6.9-1.667.src.rpm

> I think you are not using what you think you are.

...for to use openswan with klips (therefore not with netkey) without nat-t, 
the procedure then I have described is well ??
For to install nat-t patch you say:

make KERNELSRC=/usr/src/linux-2.6.9-1.667 nattpatch > /usr/src/natt.patch
cd /usr/src/linux-2.6.9-1.667
cat natt.patch | patch -p1 -s

.. with FC3 I must do:

-copy

/usr/src/redhat/SOURCES/openswan-2.4.4/packing/utils/nattpatch
in:
/usr/src/redhat/SOURCES

- from directory "/usr/src/redhat/SOURCES" I execute:
make KERNELSRC=/usr/src/redhat/SOURCES/openswan-2.4.4/packing/utils/ 
nattpatch > /usr/src/redhat/natt.patch

- cd /usr/src/redhat
- cat natt.patch | patch -p1 -s

..this is correct ??
thanks again.

------
Salvatore.