[Openswan Users] FW: VPN works, but you can't eBay ;-)

[Paul Wouters]

On Mon, 16 May 2005, Miguel Dilaj wrote:

>> We're using latest 2.3.0-2 Debian package for Openswan, together with
>> Debian kernel 2.6.11.

I am not entirely sure what 2.3.0-2 is, but.

>> Setting plutodebug=all showed information about the roadwarrior starting a
>> second, Quick Mode tunnel, even after the Main Mode one being in place.
>> This is exactly what's causing the failure to browse some sites.
>> The strange thing is that some other roadwarriors can browse these same
>> sites with no problem at all.
>> I know that all the evidence points to the WinXP boxes, but at the moment
>> I can only ensure that they use the same version of SafeNet and the
>> configuration file used is the same (except for the certificate) for all
>> clients.

There were a few confusions with NAT-T and phase1/phase2 connections in 2.2.x
and perhaps 2.3.0. Can you try 2.3.1?

Paul