[Openswan Users] openswan installation problem

[yu chen]

yes, i am sure about it, i tried two times got same result.
that's why i feel so strange.




________________________________
From: Paul Wouters <paul at xelerance.com>
To: yu chen <kith_yuchen at yahoo.com>
Cc: users at openswan.org
Sent: Tue, December 22, 2009 6:19:26 PM
Subject: Re: [Openswan Users] openswan installation problem

On Tue, 22 Dec 2009, yu chen wrote:

> if with same system and install openswan-2.4.12, see below for ipsec verify:
> 
> Checking your system to see if IPsec got installed and started correctly:
> Version check and ipsec on-path                                 [OK]
> Linux Openswan U2.4.12/K2.6.18-164.6.1.el5 (netkey)
> Checking for IPsec support in kernel                            [OK]
> NETKEY detected, testing for disabled ICMP send_redirects       [OK]
> NETKEY detected, testing for disabled ICMP accept_redirects     [OK]
> Checking for RSA private key (/etc/ipsec.secrets)               [OK]
> Checking that pluto is running                                  [OK]
> Two or more interfaces found, checking IP forwarding            [OK]
> Checking NAT and MASQUERADEing                                  [N/A]
> Checking for 'ip' command                                       [OK]
> Checking for 'iptables' command                                 [OK]
> Opportunistic Encryption Support                                [DISABLED]
> 
> why openswan-2.6.23 show up :
> Pluto listening for IKE on udp 500                              [FAILED]
> Pluto listening for NAT-T on udp 4500                           [FAILED]
> Two or more interfaces found, checking IP forwarding            [FAILED]

That's odd. Are you sure you were running openswan on both checks?
If openswan was not running it would explain things, also because
openswan might set the forwarding sysctl setting.

Paul



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20091222/0d90a4b8/attachment.html