<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1326976600;
mso-list-type:hybrid;
mso-list-template-ids:1635537408 -1078420700 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi Dennis – <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>You want to route like this<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> Office1 </span><span style='font-size:11.0pt;font-family:
Wingdings;color:#1F497D'>ŕ</span><span style='font-size:11.0pt;font-family:
"Calibri","sans-serif";color:#1F497D'> Head office </span><span
style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>ŕ</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>
Office2 <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>with tunnels connecting office1 and the head office, and office2
and the head office, right?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I’ve been down this road before. The summary is, with
IPSEC, if you want Office1 and Office2 to see each other, you must set up a
tunnel connecting those two offices directly. Every site that wants to see the
other site needs a tunnel connecting them. It won’t work to have an
intermediate site terminate one tunnel and then expect the intermediate site to
send data down a different tunnel to the third site. Somebody correct me if I’m
wrong, but it’s been my experience that the virtual star topology just
won’t work with IPSEC. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>OpenVPN claims the ability to do this but I haven’t tried
it first-hand. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><span
style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Greg Scott<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:
"Tahoma","sans-serif";color:windowtext'> users-bounces@openswan.org
[mailto:users-bounces@openswan.org] <b>On Behalf Of </b>Nick Howitt<br>
<b>Sent:</b> Friday, March 19, 2010 4:19 PM<br>
<b>To:</b> Dennis van der Meer<br>
<b>Cc:</b> users@openswan.org<br>
<b>Subject:</b> Re: [Openswan Users] Not able to ping other subnet<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Dennis,<br>
<br>
Are you sure the Draytek at Remote Office 1 is routing traffic to Remote Office
2 via the head office? I don't believe it would normally do that unless you
have set up a specific route.<br>
<br>
As an aside, why have you enabled NAT Traversal?<br>
Not an Openswan solution, but can you not set up direct VPN's between the
Drayteks?<br>
<br>
<br>
<br>
On 19/03/2010 08:40, Dennis van der Meer wrote: <o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-family:"Calibri","sans-serif"'>Hi,</span><o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>I have the
following situation:</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>We have
several sales offices that connect to our head office via an ipsec connection,
which is</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>established
by a Draytek router. On our server side we have a Linux server running with
openswan</span><o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-family:"Calibri","sans-serif"'>(Linux
Openswan U2.6.20/K2.6.27.7-smp (netkey)).</span><o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Our head
office internal network range is 192.168.2.x/24 and our sales offices are in
the range of</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>10.0.x.0/24.
So, e.g.:</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Remote
office LAN 1</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>(10.0.2.0/24)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>|</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Draytek
router (10.0.2.1)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>|</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Internet</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>|</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Linux
server (ext. ip: a.b.c.d)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>(192.168.2.3)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>|</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Head office
LAN</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>(192.168.2.0/24)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>The remote
offices are for the most part connected to internet with a dynamic ip address
(roadwarrior)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>and so I have
used an ID to keep them apart.</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>My
ipsec.conf file is as followed:</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>#
/etc/ipsec.conf - Openswan IPsec configuration file</span><o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-size:8.0pt;font-family:"Courier New"'>#
RCSID $Id: ipsec.conf.in,v 1.16 2005/07/26 12:29:45 ken Exp $</span><o:p></o:p></p>
<p class=MsoNormal><span lang=NL style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>#
This file: /usr/local/share/doc/openswan/ipsec.conf-sample</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>#</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>#
Manual: ipsec.conf.5</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>version
2.0 # conforms to second version of ipsec.conf
specification</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>#
basic configuration</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>config
setup</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
uniqueids=yes</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
nat_traversal=yes</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
virtual_private=%v4:10.0.0.0/16,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
protostack=netkey</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
plutodebug=none</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
klipsdebug=none</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>conn
%default</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
keyingtries=0</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
disablearrivalcheck=no</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
authby=secret</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
dpddelay=60</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
dpdtimeout=120</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
dpdaction=clear</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>conn
Office1</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
auto=add</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
left=a.b.c.d
(=external ip Linux server)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
leftsourceip=192.168.2.3 (=internal LAN address Linux server)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
leftsubnet=192.168.2.0/24 (=internal subnet on head office side)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
right=%any
(=other side uses dynamic ip so have to use %any here)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightsourceip=10.0.2.1 (=local ip address of Draytek router
from other side)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightsubnet=10.0.2.0/24 (=local subnet of remote office 1)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightid=@RemoteOffice1 (=ID for office to identify which
tunnel to use)</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
keyexchange=ike</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
keyingtries=5</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
type=tunnel</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
disablearrivalcheck=no</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
authby=secret</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
pfs=yes</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>conn
Office2</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
auto=add</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
left=a.b.c.d</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
leftsourceip=192.168.2.3</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
leftsubnet=192.168.2.0/24</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
right=%any</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightsourceip=10.0.3.1</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightsubnet=10.0.3.0/24</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
rightid=@RemoteOffice2</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
keyexchange=ike</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
keyingtries=5</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
type=tunnel</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
disablearrivalcheck=no</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
authby=secret</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Courier New"'>
pfs=yes</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>And there
are more offices configured in the file but they are much the same, except for
the subnet.</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>The Draytek
routers can connect without any problem and I can ping the remote subnets from
the Linux server.</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>I can also
ping the remote computers in the remote offices from the Head Office LAN.</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>It is
however not possible to ping a system in Remote Office 2 from Remote Office 1:</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>e.g. In
Remote Office 1: ping 10.0.3.1</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>After using
a “tcpdump –n icmp” I saw that traffic is going from the
computer in Remote Office 1 to the Linux server</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>but from
there it doesn’t travel to the Remote Office 2.</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>How will I
be able to access services in Remote Office 2 from Remote Office 1 (e.g. ping
or access to a web server)?</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Regards,</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'> </span><o:p></o:p></p>
<p class=MsoNormal><span style='font-family:"Calibri","sans-serif"'>Dennis</span><o:p></o:p></p>
<pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre>_______________________________________________<o:p></o:p></pre><pre><a
href="mailto:Users@openswan.org">Users@openswan.org</a><o:p></o:p></pre><pre><a
href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a><o:p></o:p></pre><pre>Building and Integrating Virtual Private Networks with Openswan: <o:p></o:p></pre><pre><a
href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><o:p></o:p></pre><pre> <o:p></o:p></pre></div>
</body>
</html>