[Openswan Users] build openswan 2.6.26 rpm with klips kernel module

[Steve Zeng]

Thanks, Paul. I tried 2.6.26 rpm without nss and problem is back. i.e. 50% packet loss even between tunnel peers. So far only 2.6.24rc5 does not have packet loss. 

Steve


-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: June 1, 2010 3:22 PM
To: Steve Zeng
Cc: mhw at WittsEnd.com; Users at openswan.org
Subject: RE: [Openswan Users] build openswan 2.6.26 rpm with klips kernel module

On Tue, 1 Jun 2010, Steve Zeng wrote:

> Subject: RE: [Openswan Users] build openswan 2.6.26 rpm with klips kernel
>     module
> 
> I re-installed the rpm version of openswan from:
> http://www.openswan.org/download/binaries/centos/5/without-nss/openswan-2.6.24rc5-1.i386.rpm
>
> and it seems the packet loss problem between tunnel interfaces is resolved. That is good sign. However, I could not ping from my private network to amazon vpc instances any more. From what I can see, it seems related to iptables firewall rules. Tcpdump shows me there is ICMP echo back from amazon vpc but from my workstation I can not get anything.

I uploaded rpms without nss of version 2.6.26. Try those?

Paul