[Openswan dev] Openswan 2.3.0 multiple defaultroute patch

Paul Wouters paul at xelerance.com
Thu Feb 3 14:52:23 CET 2005


On Thu, 3 Feb 2005, Dirk Nehring wrote:

> > >-               awk '$1 == "0.0.0.0" && $3 == "0.0.0.0" { print $NF }'`
> > >+               awk '$1 == "0.0.0.0" && $3 == "0.0.0.0" { print $NF }' |
> > >head -1`

> > That however breaks klips.
> 
> Sure. But then this check should only be done when klips is activated.

Yes, so the fix is different from your proposed patch.
 
> I have one interface with more than one default route:
> 
> root at eql:~$ ip route show
> [...]
> default equalize
>         nexthop via 1.2.3.4  dev eth0 weight 1
>         nexthop via 1.2.3.5  dev eth0 weight 1
>         nexthop via 1.2.3.6  dev eth0 weight 1

Ok, well that should and can alctually also work with klips, so I'd like
to test for this case versus using multiple interfaces (and thus different 
IP addresses as source)

> ipsec works without problems over more than 1 default route and openswan
> should get fixed for this.

I never said it shouldn't. I just said the fix is different. It will be
fixed.

Paul 



More information about the Dev mailing list