[Openswan Users] Patch 2.6.37 for use with NAT-T (stack klips)

[David McCullough]

Jivin Diogo V. kersting lays it down ...
> I want to use NAT-T with the stack klips. I am already able to connect directly using openswan and klips, but still no success in NAT-T.
> I read on README that I have to patch the kernel, but it fails. (the patch is incompatible with this kernel? Is it too hard to fix the patch? What is the latest kernel which is compatible with this patch?)
> 
> # export KERNELSRC=/usr/src/linux-2.6.37/
> # make nattpatch > /usr/src/openswan-ipsec-natt.patch
> # cd /usr/src/
> # cd linux-2.6.37/
> # patch -p1 < ../openswan-ipsec-natt.patch
> 
> patching file include/net/xfrmudp.h
> patching file net/ipv4/Kconfig
> Hunk #1 succeeded at 351 with fuzz 1.
> patching file net/ipv4/udp.c
> Hunk #1 FAILED at 108.
> Hunk #2 FAILED at 882.
> Hunk #3 FAILED at 914.
> Hunk #4 FAILED at 1044.
> Hunk #5 FAILED at 1153.
> Hunk #6 FAILED at 1641.
> 
> I tried google but did not find anyone with similar problems using 2.6.37 and openswan-2.6.33
> 
> Any suggestions?

You do not need to patch any kernel from 2.6.26 onwards to get working NAT-T.

Perhaps you can describe your problem with NAT-T and 2.6.37 ?

Cheers,
Davidm

-- 
David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org