<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1264" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I have - for the moment - given up on using
freeswan and the WinXP native client.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I reverteted too freeswan and when I connect
directly so:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>WinXP -> Modem -> Internet -> IPsec
Gateway</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I get:</FONT></DIV>
<DIV><FONT face=Arial size=2>Mar 25 16:04:01 firewall pluto[11809]: Starting
Pluto (FreeS/WAN Version 2.05 X.509-1.5.3 PLUTO_USES_KEYRR)<BR>Mar 25 16:04:01
firewall pluto[11809]: Using KLIPS IPsec interface code<BR>Mar 25 16:04:01
firewall pluto[11809]: Changing to directory '/etc/ipsec.d/cacerts'<BR>Mar 25
16:04:01 firewall pluto[11809]: loaded CA cert file 'cacert.pem'
(1180 bytes)<BR>Mar 25 16:04:01 firewall pluto[11809]: Could not change to
directory '/etc/ipsec.d/aacerts'<BR>Mar 25 16:04:01 firewall pluto[11809]:
Changing to directory '/etc/ipsec.d/ocspcerts'<BR>Mar 25 16:04:01 firewall
pluto[11809]: Changing to directory '/etc/ipsec.d/crls'<BR>Mar 25 16:04:02
firewall pluto[11809]: listening for IKE messages<BR>Mar 25 16:04:02 firewall
pluto[11809]: adding interface ipsec0/ppp0 200.200.200.200<BR>Mar 25 16:04:02
firewall pluto[11809]: loading secrets from "/etc/ipsec.secrets"<BR>Mar 25
16:04:02 firewall pluto[11809]: loaded private key file
'/etc/ipsec.d/private/GatewayKey.pem' (963 bytes)<BR>Mar 25 16:04:14 firewall
pluto[11809]: packet from 212.183.122.53:500: ignoring Delete SA payload: not
encrypted<BR>Mar 25 16:04:47 firewall pluto[11809]: packet from
212.183.122.53:500: received Vendor ID Payload; ASCII hash:
\036+Qi\005\031\034}|\026|?5\007da<BR>Mar 25 16:04:47 firewall pluto[11809]:
packet from 212.183.122.53:500: received Vendor ID Payload; ASCII hash:
@H7Un<h\005%g^\177<BR>Mar 25 16:04:47 firewall pluto[11809]: packet from
212.183.122.53:500: received Vendor ID Payload; ASCII hash: \020K<BR>Mar 25
16:04:47 firewall pluto[11809]: packet from 212.183.122.53:500: received Vendor
ID Payload; ASCII hash: &$M8m[a3\027*6cPO8\031<BR>Mar 25 16:04:47 firewall
pluto[11809]: packet from 212.183.122.53:500: initial Main Mode message received
on 213.229.22.94:500 but no connection has been authorized</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The ipsec.conf is:</FONT></DIV>
<DIV><FONT face=Arial size=2>version 2.0</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>config
setup<BR>
interfaces=%defaultroute<BR>
klipsdebug=none<BR>
plutodebug=none<BR>
uniqueids=yes</FONT></DIV>
<DIV><FONT face=Arial size=2>conn %default<BR>
keyingtries=1<BR>
disablearrivalcheck=no<BR>
authby=rsasig<BR>
rightrsasigkey=%cert<BR>
leftrsasigkey=%cert<BR>
compress=yes<BR>
auto=add<BR>
left=%defaultroute<BR>
leftcert=GatewayCert.pem<BR>
leftupdown=/usr/local/lib/ipsec/_updown_x509</FONT></DIV>
<DIV><FONT face=Arial size=2>conn xp-n2n<BR>
right=%any<BR> rightid="C=AT, L=Wien, O=Schneller
Scharau 5th Mind, CN=VPNusr1"<BR>
leftsubnet=192.168.118.0/24<BR>
rightsubnet=%any<BR> pfs=yes<BR># OE policy groups
are disabled by default<BR>conn
block<BR> auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2>conn
clear<BR> auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2>conn
private<BR> auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2>conn
private-or-clear<BR>
auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2>conn
clear-or-private<BR>
auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2>conn
packetdefault<BR>
auto=ignore</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>So am I doing something completely
wrong?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>What other WinXP -> Freeswan setups do you know
of (like a cheap and easy to setup client software)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Cheers</FONT></DIV>
<DIV><FONT face=Arial size=2>Leonard</FONT></DIV></BODY></HTML>