[Openswan Users] Route to subnet not established?

[Paul Wouters]

On Thu, 23 Mar 2006, Per Arnold Blåsmo wrote:

> My server is running Fedora FC4 with kernel 2.6.15-1.1833_FC4smp,
> openswan-2.4.4-1.0.FC4.1 and ipsec-tools-0.5-4.
>
> I have an error messages in my secure log that I think cases me problem
> to communicate correctly through the tunnel.

> the error are:
> up-client output: Cannot open "/proc/sys/net/ipv4/route/flush"
> route-client output: Cannot open "/proc/sys/net/ipv4/route/flush"
>
> which as I understand indicates that pluto is unable to flush the
> routing tables after altering the routing.

Does the machine have SElinux enabled?

> I am not sure what is causing it and what the consequence is. But when i
> ping (or any other requests) from my home network to a local machine on
> the work subnet, the ping gets to the FW, but not to the locale machine.

Check IP forwarding in /etc/sysctl.conf (or /proc)

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155