[Openswan dev] [Openswan Users] Windows XP (lsipsectool) - Debian connection Problem

Paul Wouters paul at xelerance.com
Thu Jul 26 10:57:52 EDT 2007

On Thu, 26 Jul 2007, Dharmesh Chauhan wrote:

> conn nettwo
>         left=
>         leftsubnet=
>         right=
>          rightsubnet=

You cannot do this. A subnet cannot live at two places at once.

> These configurations established the connection but I could get desired pings only after adding routing table entry in Windows XP side with the command

Well, tell me. Where should pings for go to? Your connection
claims that network lives behind the left gateway AND behind the right gateway.

I am surprised openswan allows this configuration. Perhaps we should ensure
such connections are rejected in the future. Michael?


More information about the Dev mailing list