<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Hi There,<br>
<br>
No Ipsec Interfaces means Ihave to enabled the local ipaddress ranges
for the remote sites directly on the external interfaces of each
firewall.<br>
<br>
This is a security problem....<br>
<br>
Pete<br>
<br>
Paul Wouters wrote:<br>
<blockquote type="cite"
cite="midPine.LNX.4.63.0511251929280.5124@tla.xelerance.com">
<pre wrap="">On Fri, 25 Nov 2005, Peter Farrow wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I have been using freeswan for many years and recently upgraded to openswan,
sinceI am now using Centos 4.2.
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">openswan-2.4.4-1
on Centos 4.2 with a 2.6.9-22.0.1.EL kernel
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">Can any shed any light on this for me?
</pre>
</blockquote>
<pre wrap=""><!---->
You are using the NETKEY stack on centos which has no ipsecX interfaces.
If you really want them, you will have to install KLIPS.
Paul
</pre>
</blockquote>
</body>
</html>