[Openswan Users] Installation/setup issues...

[Paul Wouters]

On Thu, 6 Mar 2008, Peter McGill wrote:

> I suspect that's due to Opportunistic encryption.
>
> Try adding the following to your ipsec.conf
>
> include /etc/ipsec.d/examples/no_oe.conf

Indeed. Those routes are IP addresses of root nameservers, to
limit the time the OE system needs to kick start itself.

They appear in /etc/ipsec.d/policies/clear

Paul