[Openswan Users] Centos Resolv.conf and Openswan

Mitsuo Yazawa mitsuoyazawa at gmail.com
Fri Apr 20 12:27:53 EDT 2012


Hi SVM,

Thanks for responding

Ip route
netstat -rn results

netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
PublicNetwork   0.0.0.0         255.255.255.224 U         0 0          0 em1
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 em1
0.0.0.0         PublicGateway   0.0.0.0         UG        0 0          0 em1

ip route
publicNetwork/27 dev em1  proto kernel  scope link  src PublicIP
169.254.0.0/16 dev em1  scope link  metric 1002
default via PublicGateway dev em1

I tried adding
ip route add 10.0.0.0/8 via 10.90.48.11 dev tap0 (10.90.48.11 is my local
ipsec IP)
but then all my ipsec network stopped reaching the other side.

Thanks!

-----Original Message-----
From: users-bounces at lists.openswan.org
[mailto:users-bounces at lists.openswan.org] On Behalf Of SVM
Sent: Friday, April 20, 2012 9:35 AM
To: users at lists.openswan.org
Subject: Re: [Openswan Users] Centos Resolv.conf and Openswan

18.04.2012 21:28, Mitsuo Yazawa wrote:
 > When I resolv DNS 8.8.8.8 it works perfectly (it goes to Eth0 Interface)
> But if I do resolv 10.1.1.11(DNS server, in the right-subnet of the  >
IPSec tunnel). It tries to DNS from Eth0, and not tap0.

Em, what about your routing table?
Show an answer from "ip route" or "netstat -rn" commands.

_______________________________________________
Users at lists.openswan.org
https://lists.openswan.org/mailman/listinfo/users
Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
Building and Integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155



More information about the Users mailing list