[Design] Super FreeSWAN 1.99.6 broken

Hi,

After looking at the issue 'no connection know for ..' problem again I come to the conclusion that something is broken since at least super-freeswan 1.99.5rc2 :

Mar 26 22:35:00 fw pluto[4215]: "dhcp"[4] 213.196.17.109 #6: cannot respond to IPsec SA request because no connection is known for 0.0.0.0/0===213.93.97.7[@base.jdimedia.nl]:17/0...213.196.17.109[C=NL, ST=Gelderland, O=Igmar, CN=laptop.jdimedia.nl, E=laptop@jdimedia.nl]:17/0===10.20.1.100/32

This is without NAT-T, just a plain DHCP-over-IPSEC config that works with FreeSWAN 1.99 + X509 patch + AES + delete-notiy (I'll look up the version tomorrow).

I'll do a manual patchup to the above setup, but with the lates version to see if the problem goes away.

The config (this does work on an older version) :

# basic configuration

config setup

        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

# basic configuration

conn %default

        keyingtries=3
        ikelifetime=3h
        keylife=1h
        disablearrivalcheck=no
        authby=rsasig
        left=%defaultroute
        leftcert=base-test.pem
        leftid=@base.jdimedia.nl
        right=%any
        rightrsasigkey=%cert
        esp=des3,aes128
        auto=add

conn dhcp
        rekey=no
        keylife=60s
        rekeymargin=30s
        leftsubnet=0.0.0.0/0
        leftprotoport=udp/bootps
        rightprotoport=udp/bootpc

conn roadwarrior
        leftsubnet=10.0.0.0/16
        rightsubnetwithin=10.20.0.0/16

conn roadwarrior-sentinel
        leftsubnet=0.0.0.0/0
        rightsubnetwithin=10.20.0.0/24

Anyone got a clue ??

        Regards,

                Igmar