[Openswan Users] Kernel vs. Openswan KLIPS Support Matrix

Torsten Krah tkrah at fachschaft.imn.htwk-leipzig.de
Thu Feb 19 12:37:54 EST 2009


Am Dienstag, 17. Februar 2009 12:35:40 schrieb Torsten Krah:
> Someone can help here a little bit?

Some question about the new NAT-T Style patch:

Did appliad the testing patches and applied after that "make kpatch" to a 
2.6.28.6 vanilla tree.
Build all and rebootet:

Version check and ipsec on-path                             	[OK]
Linux Openswan 2.6.20 (klips)
Checking for IPsec support in kernel                        	[OK]
KLIPS detected, checking for NAT Traversal support          	[FAILED]
Checking for RSA private key (/etc/ipsec.secrets)           	[OK]
Checking that pluto is running                              	[OK]
Two or more interfaces found, checking IP forwarding        	[OK]
Checking NAT and MASQUERADEing                              
Checking for 'ip' command                                   	[OK]
Checking for 'iptables' command                             	[OK]
Opportunistic Encryption Support                            	[DISABLED]


NAT-T check failed - should verfiy tell me OK here (conf enabled it) or is 
this "ok" here?

Torsten

-- 
Bitte senden Sie mir keine Word- oder PowerPoint-Anhänge.
Siehe http://www.gnu.org/philosophy/no-word-attachments.de.html

Really, I'm not out to destroy Microsoft. That will just be a 
completely unintentional side effect."
	-- Linus Torvalds
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1996 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20090219/a4236d5c/attachment.bin 


More information about the Users mailing list