[Openswan Users] Route to subnet not established?

[Rodney McKee]

Had the same messages appear and disabled selinux and messages went away.
Did not fix my problem though :-(. My packets just don't seem to be able to
find the tunnel out of the openswan system. All traffic from behind my cicso
877 return nicely.


On 3/24/06, Paul Wouters <paul at xelerance.com> wrote:
>
> On Thu, 23 Mar 2006, Per Arnold Blåsmo wrote:
>
> > >> up-client output: Cannot open "/proc/sys/net/ipv4/route/flush"
> > >> route-client output: Cannot open "/proc/sys/net/ipv4/route/flush"
> > >>
> > >> which as I understand indicates that pluto is unable to flush the
> > >> routing tables after altering the routing.
> > >>
> > >
> > > Does the machine have SElinux enabled?
> > >
> > >
> > Yes, it is on. I do not know SElinux, how does it influence this? And
> > what do I need to change?
>
> if it is selinux (I am just guessing that might be part of the problem),
> then
> try editing /etc/sysconfig/selinux amd set SELINUX=disabled.
>
> another option I thought of is Advanced Routing not being part of your
> kernel,
> but if you run a stock fedora kernel, that is not the case. If you run
> your
> own compiled kernel, check that CONFIG_IP_ADVANCED_ROUTER is enabled.
>
> > > Check IP forwarding in /etc/sysctl.conf (or /proc)
> > >
> > IP forwarding is on!
>
> Okay. Then I am not entirely sure what is causing your problem.
>
> Paul
> --
> Building and integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>
>
>


--
Rgds
Rodney McKee
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20060324/35edda77/attachment.htm