[Openswan Users] packet rejected: should have been encrypted

[Jacco de Leeuw]

Bram Bouwens schreef:

> I'm now trying to work out a setup for our Windows addicts.
> In the test setup I have a Windows XP machine behind a NAT
> gateway. I'm following
> http://www.natecarlson.com/linux/ipsec-x509.php .

I don't know if this causes your problem but your subnet is not excluded:

>         virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16

           virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,
                           %v4:!192.168.0.0/24

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl