[Openswan Users] Fedora core 2/klips

Jason Sigurdur jason.sigurdur at ASPENVIEW.ORG
Tue Jun 29 15:44:42 CEST 2004


Hi, I would like to use  KLIPS instead of the already integrated ipsec
portion of the 2.6 fedora kernel. Is there a binary availible? I have tried
to Compile the source and keep getting an error about the 'Rules.make' not
exsiting in '/usr/src/linux'? 


Currently I setup a tunnel between 2 gw's one freeswan-1.99 and
openswan-2.1.2. The tunnel commes up 'with compresssion' , but when pinging
between subnets
I see the following in a traffic dump:



172.16.200.x -> 172.16.201.x ESP ESP (SPI=09a4e1)
172.16.201.x -> 172.16.200.x ESP ESP (SPI=0ddfd9)
      10.200.x.x -> 10.201.x.x ICMP

This is done on the external interface. Why do I see the internal traffic?

[10.0.0.0]---[gw1]=====[gw2]---[10.2.0.0]



Any suggestions would be appreciated.


More information about the Users mailing list