Hello Sean,<div><br></div><div>Could you send the config files of Libreswan? It seems to be a problem with DDNS. <span></span>Are you using that on your server for a dynamic WAN IP address? </div><div><br></div><div>You're using libreswan, not Openswan, its a newer fork of Openswan and has a different mailing list. Don't know whether you'll get much response here. </div>
<div><br></div><div>Greetings,</div><div><br></div><div>Bart</div><div><br>On Wednesday, February 19, 2014, Sean Smith <<a href="mailto:ssmith@nanb.nb.ca">ssmith@nanb.nb.ca</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-CA" link="blue" vlink="purple"><div><p class="MsoNormal">Hi all. I recently have been rebuilding a new Centos serer to replace an existing one. <u></u><u></u></p><p class="MsoNormal">I use this server as a backup device and then push my backups to a remote spot via and IPSec VPN tunnel.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">It has been working. However, my newly built box using the same configuration file will not connect.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
My IPSec verify is below.<u></u><u></u></p><p class="MsoNormal">-------<u></u><u></u></p><p class="MsoNormal">Verifying installed system and configuration files<br><br>Version check and ipsec on-path [OK]<br>
Libreswan 3.7 (netkey) on 3.12.7-200.fc19.x86_64<br>Checking for IPsec support in kernel [OK]<br> NETKEY: Testing XFRM related proc values<br> ICMP default/send_redirects [OK]<br>
ICMP default/accept_redirects [OK]<br> XFRM larval drop [OK]<br>Pluto ipsec.conf syntax [OK]<br>Hardware random device [N/A]<br>
Two or more interfaces found, checking IP forwarding [OK]<br>Checking rp_filter [OK]<br>Checking that pluto is running [OK]<br> Pluto listening for IKE on udp 500 [OK]<br>
Pluto listening for IKE/NAT-T on udp 4500 [OK]<br> Pluto ipsec.secret syntax [OK]<br>Checking NAT and MASQUERADEing [TEST INCOMPLETE]<br>Checking 'ip' command [OK]<br>
Checking 'iptables' command [OK]<br>Checking 'prelink' command does not interfere with FIPS [PRESENT]<br>Checking for obsolete ipsec.conf options [OK]<br>Opportunistic Encryption [DISABLED]<br>
--------<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Also, in the secure and messages files I can see that Phase 1 completes, but it seems to get stuck on EVENT_PENDING_DDNS. It does queue up EVENT_PENDING_PHASE2 but never gets by the DDNS.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Any suggestions are greatl appreciated.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Feb 19 09:45:31 localhost pluto[8835]: | * processed 0 messages from cryptographic helpers<br>
Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS in 59 seconds<br>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS in 59 seconds<br>Feb 19 09:45:31 localhost pluto[8835]: |<br>Feb 19 09:45:31 localhost pluto[8835]: | *received whack message<br>
Feb 19 09:45:31 localhost pluto[8835]: initiating all conns with alias='aliantVPN'<br>Feb 19 09:45:31 localhost pluto[8835]: | * processed 0 messages from cryptographic helpers<br>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS in 59 seconds<br>
Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS in 59 seconds<br>Feb 19 09:45:31 localhost pluto[8835]: | reaped addconn helper child<br> <u></u><u></u></p></div></div></blockquote></div><br><br>-- <br>
<span style="font-family:Calibri,sans-serif;font-size:14px;border-collapse:collapse">**** DISCLAIMER ****<br><br>"This e-mail and any attachment thereto may contain information which is confidential and/or protected by intellectual property rights and are intended for the sole use of the recipient(s) named above. <br>
Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s) is prohibited. <br>If you have received this e-mail in error, please notify the sender either by telephone or by e-mail and delete the material from any computer".<br>
<br>Thank you for your cooperation.</span><br>