<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.10.3">
</HEAD>
<BODY>
On Wed, 2006-09-27 at 16:51 +0200, Paul Wouters wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">On Wed, 27 Sep 2006, Bas Driessen wrote:</FONT>
<FONT COLOR="#000000">> Going through the lists, I found out that DES is not supported by</FONT>
<FONT COLOR="#000000">> default in OpenSwan, so I have re-compiled the package by setting the</FONT>
<FONT COLOR="#000000">> USE_WEAKSTUFF?=true flag in the Makefile.inc and also corrected the line</FONT>
<FONT COLOR="#000000">> to WEAK_DEFS=-DUSE_VERYWEAK_DH1=1 -DUSE_1DES in the Makefile of Pluto.</FONT>
<FONT COLOR="#000000">> All compiles OK. I know that 3DES is better etc, but this is out of my</FONT>
<FONT COLOR="#000000">> control. I have to get it to work with the current setup.</FONT>
<FONT COLOR="#000000">You might also need to set USE_BROKEN=yes</FONT>
<FONT COLOR="#000000">3DES is not "better". 1DES is trivially brute forced. You have no VPN. You</FONT>
<FONT COLOR="#000000">better make sure your boss knows that, and gets it in writing, so that</FONT>
<FONT COLOR="#000000">you can blame management for this unwise decision.</FONT>
<FONT COLOR="#000000">> left=%defaultroute</FONT>
<FONT COLOR="#000000">> leftsubnet=192.168.1.0/24</FONT>
<FONT COLOR="#000000">> leftid=192.168.1.13</FONT>
<FONT COLOR="#000000">> sonicwall.secrets</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> 192.168.1.13 66.nnn.nnn.nnn : PSK "abcdef"</FONT>
<FONT COLOR="#000000">If your ip is actually 192.168.1.13 you cannot tunnel 192.168.1.0/24.</FONT>
<FONT COLOR="#000000">you cannot be at two places at once.</FONT>
</PRE>
</BLOCKQUOTE>
<BR>
Thanks Paul, I have changed my leftsubnet as follows:<BR>
<BR>
leftsubnet=192.168.1.13/32<BR>
<BR>
Still same failing results. All I need is to connect from a Linux PC as a client to a VPN tunnel.<BR>
<BR>
Will try the USE_BROKEN switch now.<BR>
<BR>
Thanks,<BR>
Bas.<BR>
<BR>
<BR>
<BR>
</BODY>
</HTML>