<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000066" bgcolor="#ffffff">
Simple,<br>
<br>
Check your logs to see why did not pluto start up correctly (problem
with random number generator?)<br>
<br>
Ondrej<br>
<br>
On 22.12.2009 14:27, yu chen wrote:
<blockquote cite="mid:609372.52338.qm@web63906.mail.re1.yahoo.com"
type="cite">
<style type="text/css"><!-- DIV {margin:0px;} --></style>
<div
style="font-family: times new roman,new york,times,serif; font-size: 10pt;">
<div>Dear Paul<br>
if with same system and install openswan-2.4.12, see below for ipsec
verify:<br>
<br>
<span style="color: rgb(255, 0, 127);">Checking your system to see if
IPsec got installed and started correctly:</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Version check and ipsec
on-path [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Linux Openswan
U2.4.12/K2.6.18-164.6.1.el5 (netkey)</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for IPsec support in
kernel [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">NETKEY detected, testing for
disabled ICMP send_redirects [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">NETKEY detected, testing for
disabled ICMP accept_redirects [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for RSA private key
(/etc/ipsec.secrets) [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking that pluto is
running [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Two or more interfaces found,
checking IP forwarding [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking NAT and
MASQUERADEing [N/A]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for 'ip'
command [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for 'iptables'
command [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Opportunistic Encryption
Support [DISABLED]</span><br>
<br>
<span style="color: rgb(0, 0, 0);">why openswan-2.6.23 show up </span>:<br>
<span style="color: rgb(255, 0, 127);">Pluto listening for IKE on udp
500 [FAILED]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Pluto listening for NAT-T on
udp 4500 [FAILED]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Two or more interfaces found,
checking IP forwarding [FAILED]</span><br>
<br>
please advice me <br>
thank you very much <br>
<br>
kind regards<br>
kelsen chen <br style="color: rgb(255, 0, 127);">
<br>
</div>
<div
style="font-family: times new roman,new york,times,serif; font-size: 10pt;"><br>
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><font
face="Tahoma" size="2">
<hr size="1"><b><span style="font-weight: bold;">From:</span></b> yu
chen <a class="moz-txt-link-rfc2396E" href="mailto:kith_yuchen@yahoo.com"><kith_yuchen@yahoo.com></a><br>
<b><span style="font-weight: bold;">To:</span></b> Paul Wouters
<a class="moz-txt-link-rfc2396E" href="mailto:paul@xelerance.com"><paul@xelerance.com></a><br>
<b><span style="font-weight: bold;">Cc:</span></b> <a class="moz-txt-link-abbreviated" href="mailto:users@openswan.org">users@openswan.org</a><br>
<b><span style="font-weight: bold;">Sent:</span></b> Mon, December
21, 2009 8:12:44 PM<br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Openswan
Users] openswan installation problem<br>
</font><br>
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;">
<div>Dear Paul <br>
thank you very much. now openswan can be install to my computer. <br>
after making sysctl.conf, ipsec verify, see below:<br>
<br>
<span style="color: rgb(255, 0, 127);">Checking your system to see if
IPsec got installed and started correctly:</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Version check and ipsec
on-path [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Linux Openswan
U2.6.23/K2.6.18-164.6.1.el5 (netkey)</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for IPsec support in
kernel [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">NETKEY detected, testing for
disabled ICMP send_redirects [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">NETKEY detected, testing for
disabled ICMP accept_redirects [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for RSA private key
(/etc/ipsec.secrets) [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking that pluto is
running [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Pluto listening for IKE on udp
500 [FAILED]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Pluto listening for NAT-T on
udp 4500 [FAILED]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Two or more interfaces found,
checking IP forwarding [FAILED]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking NAT and
MASQUERADEing [N/A]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for 'ip'
command [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Checking for 'iptables'
command [OK]</span><br
style="color: rgb(255, 0, 127);">
<span style="color: rgb(255, 0, 127);">Opportunistic Encryption
Support [DISABLED]</span><br>
why got failed ? <br>
<br>
thank you very much <br>
<br>
kind regards<br>
kelsen <br>
</div>
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br>
<div style="font-family: arial,helvetica,sans-serif; font-size: 13px;"><font
face="Tahoma" size="2">
<hr size="1"><b><span style="font-weight: bold;">From:</span></b>
Paul Wouters <a class="moz-txt-link-rfc2396E" href="mailto:paul@xelerance.com"><paul@xelerance.com></a><br>
<b><span style="font-weight: bold;">To:</span></b> yu chen
<a class="moz-txt-link-rfc2396E" href="mailto:kith_yuchen@yahoo.com"><kith_yuchen@yahoo.com></a><br>
<b><span style="font-weight: bold;">Cc:</span></b> <a class="moz-txt-link-abbreviated" href="mailto:users@openswan.org">users@openswan.org</a><br>
<b><span style="font-weight: bold;">Sent:</span></b> Mon, December
21, 2009 7:52:37 PM<br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Openswan
Users] openswan installation problem<br>
</font><br>
On Mon, 21 Dec 2009, yu chen wrote:<br>
<br>
> Dear Paul<br>
> yes, i made mistake.<br>
> now i can use make programs,but ruuning make install got error,
see below:<br>
<br>
> /bin/sh: xmlto: command not found<br>
<br>
yum install xmlto<br>
<br>
Paul<br>
</div>
</div>
</div>
<br>
</div>
</div>
<!-- cg5.c2.mail.re1.yahoo.com compressed/chunked Mon Dec 21 02:38:28 PST 2009 -->
</div>
<br>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@openswan.org">Users@openswan.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
<br>
</body>
</html>