[Openswan dev] bug report (auto=add &auto=start)
Alex
linux at vfemail.net
Mon Jun 18 08:43:59 EDT 2007
Hello dev experts,
Few days ago i posted here a message being in doubt who is responsabile for a
strange message in my syslog.
See my old posts here:
http://lists.openswan.org/pipermail/dev/2007-June/001593.html
or here
http://lists.openswan.org/pipermail/users/2007-June/012591.html
Jun 15 14:04:22 dev13 ipsec_setup: ...Openswan IPsec started
Jun 15 14:04:22 dev13 ipsec_setup: Starting Openswan IPsec 2.4.8...
Jun 15 14:04:23 dev13 ipsec__plutorun: 104 "z1" #1: STATE_MAIN_I1: initiate
Jun 15 14:04:23 dev13 ipsec__plutorun: ...could not start conn "z1"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Now i come back with some explanations and open a bug report:
Below, comes my ipsec.conf file (the same on booth routers):
$ cat /etc/ipsec.conf
version 2.0
conn z1
authby=secret
left=1.2.3.4
leftsubnet=192.168.13.0/24
leftnexthop=1.2.3.111
right=5.6.7.8
rightsubnet=10.0.100.0/24
rightnexthop=5.6.7.222
keyexchange=ike
ike=3des-md5-modp1024
auth=esp
esp=3des-md5-96
pfs=no
auto=start
include /etc/ipsec.d/examples/no_oe.conf
If, on one router i change from auto=start to auto=add, the message disappear
and i have a clean syslog on this router (but the same stupid message appear
on the second router, where i keeped auto=start):
Jun 15 15:02:23 dev13 kernel: NET: Registered protocol family 15
Jun 15 15:02:23 dev13 ipsec_setup: NETKEY on eth0 1.2.3.4/255.255.255.0
broadcast 1.2.3.255
Jun 15 15:02:24 dev13 ipsec_setup: ...Openswan IPsec started
Jun 15 15:02:24 dev13 ipsec_setup: Starting Openswan IPsec 2.4.8...
The main problem is that i can't use auto=add on booth routers.... How can be
turned off this stupid message!
Regards,
Alex
PS: and yes, /var/log/secure does not show up some errors!
More information about the Dev
mailing list