[Openswan dev] [Commits] [OPENSWAN.git] Changes to ref refs/heads/master

[Michael Richardson]

>>>>> "Paul" == Paul Wouters <paul at xelerance.com> writes:
    Paul> On Mon, 22 Nov 2010, Michael Richardson wrote:

    >>>>>>> "Paul" == Paul Wouters <paul at vault.xelerance.com> writes:
    Paul> Do not configure an IP address for mast interface. We route
    Paul> into it using the route 50 table from the main routing table.
    >> I think this should be the default, but you want to optionally do
    >> this.
    >> 
    >> The remote-access situation where the IP address is assigned from
    >> the remote pool (i.e. 192.168.1.yourlaptop) should have that IP
    >> on some interface, right?

    Paul> Yes, but that should then be done in _updown.mast?

I agree, and I thought that it was done there.

    Paul> Currently, this was being done at bootup in init_useful_mast()
    Paul> so there was no way to not have an IP address there. And at
    Paul> times it would be a wrong one, causing packet flow issues.

okay. I think I forgot this.

    Paul> One way of tracking this could be the ipsec.info file, but I
    Paul> think that file is best obliterated completely.

KILL! KILL! KILL!