[Openswan Users] saref patch

Giovani Moda giovani at mrinformatica.com.br
Fri Nov 27 12:35:04 EST 2009


> If i remember correctly, it should have the IP of the external
interface?

For some reason, it's listening on my internal interface. I also notices
this in the logs:

Nov 27 15:24:45 inet pluto[5207]: | useful mast device -1
Nov 27 15:24:45 inet pluto[5207]: ERROR: PF_KEY K_SADB_X_PLUMBIF
response for configure_mast_device  included errno 239: Unknown error
239
Nov 27 15:24:45 inet pluto[5207]: NAT-Traversal: Trying new style NAT-T
Nov 27 15:24:45 inet pluto[5207]: adding interface mast0/eth1
192.168.0.100:500 (fd=12)
Nov 27 15:24:45 inet pluto[5207]: adding interface mast0/eth1
192.168.0.100:4500 (fd=13)
Nov 27 15:24:45 inet pluto[5207]: adding interface mast0/eth0
192.168.1.37:500 (fd=14)
Nov 27 15:24:45 inet pluto[5207]: adding interface mast0/eth0
192.168.1.37:4500 (fd=15)
Nov 27 15:24:45 inet pluto[5207]: | useful mast device 0
Nov 27 15:24:45 inet pluto[5207]: | useful mast device 0

I remember a very similar error (if not the same) when using kernel
without saref patch. I'm attaching the saref patch I used, so you can
take a look (if you can) if nothing is missing. Could that be the reason
for mast listening on my internal interface?

> No one has tested saref with cryptoapi (or OCF) yet. There is no
> reason it cannot be made to work with it, but we do not know yet
> if there are any issues.

I got those errors with klips also, it's not a saref issue. I believe
it's a issue of the new openswan commits with older kernels. I'll try to
port saref to a newer kernel and see how it behaves with cryptoapi.

Giovani
 

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 4642 (20091127) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kernel-2.6.23.17-saref.patch
Type: application/octet-stream
Size: 6894 bytes
Desc: kernel-2.6.23.17-saref.patch
Url : http://lists.openswan.org/pipermail/users/attachments/20091127/0f6f0712/attachment.obj 


More information about the Users mailing list