[Openswan Users] Routing problem

[Tuomo Soini]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ludovic wrote:
> Sorry to send again a mail but i always have problem.
> 
> I'am currently trying to modify updown script in order to delete wrong
> route to 192.168.7.0/24 but it doesn't work.
> 
> If i delete the route, it can't add route through ipsec to the peer
> subnet (in this case 192.168.2.0/24) since 192.168.7.1 is not
> reachable via ipsec0.
> 
> I just have added :
> 

There is no bug other that ipsec0 interface is using same preferences as
underlying device and kernel is adding same device route.

Only fix is to change klips to use /32 netmask for ipsec0 device.

_updown script won't add routes to network it doesn't have tunnel to.

- --
Tuomo Soini <tis at foobar.fi>
Linux and network services
+358 40 5240030
Foobar Oy <http://foobar.fi/>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFFzBeFTlrZKzwul1ERAvmGAKCrX3stcJzYB+hE/TtJlFXfx8DOPgCdHrhX
SqMPxbuCvFJjsLhvlC7Ft/Q=
=osW3
-----END PGP SIGNATURE-----