[Openswan Users] 2.6.24rc3 KLIPS Module compilation problem

[Sven Schiwek]

Paul Wouters wrote:
> On Tue, 17 Nov 2009, Sven Schiwek wrote:
> 
>> I want to compile the KLIPS Module on Debian Linux (K 2.6.30.9) but the
>> compile process terminated with an error.
>>
>> Is this a Kernel problem (not compatible?), or an Openswan problem?
> 
>> /data/pub/LinuxSoftware/Openswan/openswan-2.6.24rc3/modobj26/ipsec_init.o
>> In file included from include/linux/gfp.h:4,
>>                 from include/linux/kmod.h:22,
>>                 from include/linux/module.h:13,
>>                 from
>> /data/pub/LinuxSoftware/Openswan/openswan-2.6.24rc3/modobj26/ipsec_init.c:25:
>>
>> include/linux/mmzone.h:18:26: error: linux/bounds.h: No such file or
>> directory
>> include/linux/mmzone.h:256:5: warning: "MAX_NR_ZONES" is not defined
>> In file included from include/linux/gfp.h:4,
>>                 from include/linux/kmod.h:22,
>>                 from include/linux/module.h:13,
>>                 from
> 
> I assume something changes with bounds.h, and we are not doing the right
> thing
> for that kernel version.
> 

Hi,

after a Kernel recompile the error has disappeared - well ok, but I have
an interesting ipsec restart affect. The UDP Ports 500 and 4500 are not
released so on every restart a "new" socket pair is created.

How can I tell Openswan to release all sockets on a restart? (Normally I
do a '/etc/init.d/ipsec restart')

$ netstat -a -u -p -n | grep 500
udp        0      0 111.111.111.111:4500    0.0.0.0:*        12264/pluto

udp        0      0 222.222.222.222:4500    0.0.0.0:*        12264/pluto
udp        0      0 111.111.111.111:4500    0.0.0.0:*        -
udp        0      0 222.222.222.222:4500    0.0.0.0:*        -
udp        0      0 111.111.111.111:4500    0.0.0.0:*        -
udp        0      0 222.222.222.222:4500    0.0.0.0:*        -
udp        0      0 111.111.111.111:500     0.0.0.0:*        12264/pluto
udp        0      0 222.222.222.222:500     0.0.0.0:*        12264/pluto
udp     1272      0 111.111.111.111:500     0.0.0.0:*        -
udp     1272      0 222.222.222.222:500     0.0.0.0:*        -
udp     2120      0 111.111.111.111:500     0.0.0.0:*        -
udp     6536      0 222.222.222.222:500     0.0.0.0:*        -

Thanks,
Sven