[Design] BUG: something in verify is acting up

-----BEGIN PGP SIGNED MESSAGE-----   Verify (like everything...) is important in that users should now be using it to decide if things are 'working', if verify does not return all "OK"s then something is amiss.

  So having this fail on a vanilla road warrior laptop is a BUG.

  Various output appended.

		||ugh Daniel
		Testing Fool
		hugh@freeswan.org

  

  The failure:

ahost# ipsec verify
...
Two or more interfaces found, checking IP forwarding [FAILED] ...

  What other networks:

ifconfig
ipsec0 Link encap:Ethernet HWaddr 00:21:EB:4A:FE:25

          inet addr:216.240.42.209  Mask:255.255.255.240
          UP RUNNING NOARP  MTU:16260  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16 errors:0 dropped:49 overruns:0 carrier:0
          collisions:0 
          RX bytes:0 (0.0 b)  TX bytes:2203 (2.1 Kb)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:153 errors:0 dropped:0 overruns:0 frame:0
          TX packets:153 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 
          RX bytes:177539 (173.3 Kb)  TX bytes:177539 (173.3 Kb)

wlan0     Link encap:Ethernet  HWaddr 00:21:EB:4A:FE:25  
          inet addr:216.240.42.209  Bcast:216.240.42.223  Mask:255.255.255.240
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1973 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3041 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 
          RX bytes:886984 (866.1 Kb)  TX bytes:128622 (125.6 Kb)

  Yea, it's even all off:

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

ahost# cat /etc/systctl.conf
# Disables packet forwarding

net.ipv4.ip_forward = 0
# Enables source route verification

net.ipv4.conf.default.rp_filter = 0
# Disables the magic-sysrq key

kernel.sysrq = 0

-----BEGIN PGP SIGNATURE-----

Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPlQwzVZpdJR7FBQRAQEC1QQAn9Kl72i5FFwqND9eHmX7jYigASlCQoFb QG/RJHCwwbmp70iEVLWAxJENR1r5fNymz1awfokRXLeSoScdqqSmt9MMFcHPeS6o YdS1H2Kk/DoTzluTUwYOYELPLVS4/ISES7qjfNO/LxmNm2rOUhgHd6bx7JK6TZlV 24N8xZ0I9QY=
=sqk7
-----END PGP SIGNATURE-----