<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><DIV><SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV><BR class="khtml-block-placeholder"></DIV>Hello all, <BR class="Apple-interchange-newline"></SPAN> </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I made a lot of tests this morning, and I found if I change the connection parameters right=FIXED-IP to right=%any and change the ipsec.secrets file well I d'ont have
anymore pluto crash. I can't understand why but the fact is here.</DIV><DIV>I still have the core dump file, and if anyone need to investigate, please contact me. </DIV><DIV>Now I have to set up the authentification and read a lot of docs about it :) </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>thanks to everyone</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><BR><DIV><DIV>Le 19 avr. 07 à 23:28, Jean Marc Le Fevre a écrit :</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV><SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-inden
t: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; ">Hello, <BR class="Apple-interchange-newline"></SPAN> </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I've installed the 2.4.7 version and still the same problem. </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I guess the main error is:</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: ASSERTION FAILED at kernel.c:2237: c->kind == CK_PERMANENT || c->kind == CK_INSTANCE</DIV><DIV><BR c="" lass="khtml-block-placeholder"></DIV><DIV>my kernel is kernel-default-2.6.18 rpm package from a opensuse 10.2</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>thanks</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>here are the new logs: </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Apr 19 23:17:02 Zpro pluto[23031]: packet from 82.XX.XX.XX:500: received Vendor ID payload [RFC 3947] method set to=110 </DI
V><DIV>Apr 19 23:17:02 Zpro pluto[23031]: packet from 82.XX.XX.XX:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] meth=109, but already using method 110</DIV><DIV>Apr 19 23:17:02 Zpro pluto[23031]: packet from 82.XX.XX.XX:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110</DIV><DIV>Apr 19 23:17:02 Zpro pluto[23031]: packet from 82.XX.XX.XX:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110</DIV><DIV>Apr 19 23:17:02 Zpro pluto[2303 1]: "L2TP-PSK" #1: responding to Main Mode</DIV><DIV>Apr 19 23:17:02 Zpro pluto[23031]: "L2TP-PSK" #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1</DIV><DIV>Apr 19 23:17:02 Zpro pluto[23031]: "L2TP-PSK" #1: STATE_MAIN_R1: sent MR1, expecting MI2</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: ignoring Vendor ID payload [KAME/racoon]</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: NAT-Traversal
: Result using RFC 3947 (NAT-Traversal): i am NATed</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: STATE_MAIN_R2: sent MR2, expecting MI3</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: Main mode peer ID is ID_IPV4_ADDR: '82.XX.XX.XX'</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: I did not send a certificate because I do not have one.</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: | NAT-T: new mapping 82.XX.XX.XX:500/4500)</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: ignoring informational payload, ty
pe IPSEC_INITIAL_CONTACT</DIV><DIV>Apr 19 23:17:03 Zpro pluto[23031]: "L2TP-PSK" #1: received and ignored informational message</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: NAT-Traversal: received 2 NAT-OA. ignored because peer is not NATed</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: responding to Quick Mode {msgid:c15eebb0}</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: ASSERTION FAILED at kernel.c:2237: c->kind == CK_PERMANENT || c->kind == CK_INSTANCE</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: " L2TP-PSK" #2: interface lo/lo 127.0.0.1</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: interface lo/lo 127.0.0.1</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: interface eth0/eth0 10.91.130.61</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: interface eth0/eth0 10.91.130.61</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: %myid = (none)</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "
L2TP-PSK" #2: debug none</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448</DIV><DIV>Apr 19 23:17:04 Zpro pluto[ 23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256</DIV><DIV>Apr 19 23:17:04 Zpro plut
o[23031]: "L2TP-PSK" #2: algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=2 56, keysizemax=256</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE encry
pt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536</DIV><DIV>Ap r 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK"
#2: algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0} </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": 10.91.130 ..0/24===10.91.130.61:17/%any---10.91.130.2...82.XX.XX.XX:17/49178; unrouted; eroute owner: #0</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3</DIV><DIV>Apr 19 23:17:04
Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": policy: PSK+ENCRYPT+TUNNEL+DONTREKEY; prio: 32,24; interface: eth0; encap: esp;</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": newest ISAKMP SA: #1; newest IPsec SA: #0; </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: "L2TP-PSK": IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1024</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: #2: "L2TP-PSK":4500 STATE_QUICK_R0 (expecting QI1); EVENT_SO_DISCARD i n 0s; nodpd</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: #1: "L2TP-PSK":4500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 3599s; newest ISAKMP; nodpd</DIV><DIV>Apr 19 23:17:04 Zpro pluto[23031]: "L2TP-PSK" #2: </DIV><DIV>Apr 19 23:17:04 Zpro ipsec__plutorun: /usr/local/lib/ipsec/_plutorun: line 237: 23031 Aborted (core dumped) /usr/local/libexec/ipsec/pluto --nofork --s
ecretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --use-auto --uniqueids --nat_traversal --nhelpers 0</DIV><DIV>Apr 19 23:17:04 Zpro ipsec__plutorun: !pluto failure!: exited with error status 134 (signal 6)</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><BR><DIV><DIV>Le 18 avr. 07 à 20:36, Paul Wouters a écrit :</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">On Wed, 18 Apr 2007, Jean Marc Le Fe vre wrote:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> <BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN class="Apple-converted-space"> </SPAN>dumpdir=/tmp</DIV> </BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 1
4px; "><BR></DIV> <BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: STATE_MAIN_R1: sent MR1,</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">expecting MI2</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: ignoring Vendor ID payload</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-l eft: 0px; ">[KAME/racoon]</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: NAT-Traversal: Result using</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">3: i am NATed</DIV> </BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px
; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">So NAT'ed....</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> <BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: transition from state</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">STATE_MAIN_R1 to state STATE_MAIN_R2</DIV><DIV st="" yle="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: STATE_MAIN_R2: sent MR2,</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">expecting MI3</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: Main mode peer
ID is</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">ID_IPV4_ADDR: 'IPFIXE'</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: I did not send a certificate</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">because I do not have one.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: "L2TP-PSK" #1: transition from state</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">STATE_MAIN_R2 to state STATE_MAIN_R3</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro pluto[11600]: | NAT-T: new mapping IPFIXE:500/4500)</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:16 Zpro
pluto[11600]: "L2TP-PSK" #1: STATE_MAIN_R3: sent MR3,</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">prf=oakley_sha group=modp1024}</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro pluto[11600]: "L2TP-PSK" #2: NAT-Traversal: received 2</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">NAT-OA. ignored because peer is not NATed</DIV> </BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Not NAT'ed??</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-heigh
t: 14px; "><BR></DIV> <BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro pluto[11600]: "L2TP-PSK" #2: responding to Quick Mode</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">{msgid:99321c1d}</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro pluto[11600]: "L2TP-PSK" #2: ASSERTION FAILED at</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0p x; ">kernel.c:2237: c->kind == CK_PERMANENT || c->kind == CK_INSTANCE</DIV> </BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Run gdb on the core in /tmp, and please give us some more information.</DIV><DIV style="margin-top: 0px; margin-right:
0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Which version of openswan is this? If it is pre 2.4.7, please upgrade and try</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">again.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> <BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">newest ISAKMP; nodpd</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro pluto[11600]: "L2TP-PSK" #2:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro ipsec__plutorun: /usr/lib/ipsec/_plutorun: line 217:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left
: 0px; ">11600 Aborted <SPAN class="Apple-converted-space"> </SPAN>(core dumped) /usr/lib/ipsec/pluto --nofork</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --use-auto</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--uniqueids --nat_traversal --nhelpers 0</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro ipsec__plutorun: !pluto failure!:<SPA n="" class="Apple-converted-space"> exited with error</SPA></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">status 134 (signal 6)</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Apr 18 18:04:17 Zpro ipsec__plutorun: restarting IPsec after pause...</DIV> </BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bot
tom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Same for this one.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">you might also want to try not using rightprotoport=17/%any, but 17/1701 and</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">do a test with Windows XP (not OSX)</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Paul</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">-</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Buildi
ng and integrating Virtual Private Networks with Openswan:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "></DIV><DIV style="margin-top: 0px; margin-right: 0px; m argin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> </BLOCKQUOTE></DIV><BR> <DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "
>_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:Users@openswan.org">Users@openswan.org</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Building and Integrating Virtual Private Networks with Openswan:<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV st
yle="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">!DSPAM:4627df2c50705327860300!</DIV> </BLOCKQUOTE></DIV><BR>
!DSPAM:4628993750709355615486!
</BODY></HTML>