Configured openswan to connect to Cisco 877, all apears to be fine from
behind the cisco with packets entering and leaving the openswan system:<br>
<br>
08:39:42.412001 IP (tos 0x0, ttl 64, id 41110, offset 0, flags
[DF], proto 50, length: 152) <a href="http://202.164.204.91"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "202.164.204.91" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 202.164.204.91</a> > <a href="http://150.101.153.90"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "150.101.153.90" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 150.101.153.90</a>:
ESP(spi=0x3a43fc22,seq=0x3f)<br>
08:39:42.460952 IP (tos 0x0, ttl 248, id 16154, offset 0, flags [DF],
proto 50, length: 168) <a href="http://150.101.153.90"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "150.101.153.90" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 150.101.153.90</a> > <a href="http://202.164.204.91"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "202.164.204.91" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 202.164.204.91</a>:
ESP(spi=0x0465be13,seq=0x52)<br>
<br>
But, traffic leaving the openswan system is just routing of to nowhere:<br>
08:41:59.722937 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF],
proto 1, length: 84) <a href="http://202.164.204.91"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "202.164.204.91" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 202.164.204.91</a> > <a href="http://10.0.0.5"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "10.0.0.5" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 10.0.0.5</a>: icmp 64: echo
request seq 0<br>
<br>
<br>-- <br>Rgds<br>Rodney McKee