[Openswan Users] Centos 6 with SARef support

[Giovani Moda]

> You should have rightprotoport=17/%any. You should also have
type=transport

Thanks for that Paul. Turns out it was type=transport missing that was
causing that. Now it seems to be working, I'll just run some stability
tests to confirm.

Just one more thing: I'm getting a lot of those on /var/log/messages,
basically one for packet transmitted:

Jul 27 20:37:02 mail kernel: klips_debug:klips_set_ipc_saref: sending
with saref=1
Jul 27 20:37:02 mail kernel: klips_debug:klips_set_ipc_saref: setting
oif: 40
Jul 27 20:37:02 mail kernel: klips_debug:ipsec_mast_start_xmit:
skb=f2b0b680
Jul 27 20:37:02 mail kernel: klips_debug:ipsec_mast_start_xmit: getting
SAref=1 from sec_path
Jul 27 20:37:02 mail kernel: klips_debug:klips_set_ipc_saref: sending
with saref=1
Jul 27 20:37:02 mail kernel: klips_debug:klips_set_ipc_saref: setting
oif: 40
Jul 27 20:37:02 mail kernel: klips_debug:ipsec_mast_start_xmit:
skb=f2b0b680
Jul 27 20:37:02 mail kernel: klips_debug:ipsec_mast_start_xmit: getting
SAref=1 from sec_path
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: sending
with saref=1
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: setting
oif: 40
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit:
skb=f2b4e9c0
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit: getting
SAref=1 from sec_path
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: sending
with saref=1
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: setting
oif: 40
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit:
skb=f2b4e9c0
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit: getting
SAref=1 from sec_path
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: sending
with saref=1
Jul 27 20:37:06 mail kernel: klips_debug:klips_set_ipc_saref: setting
oif: 40
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit:
skb=f2b4e9c0
Jul 27 20:37:06 mail kernel: klips_debug:ipsec_mast_start_xmit: getting
SAref=1 from sec_path

Any way to suppress that? Klipsdebug is already set to none.

Thanks,

Giovani