Re: [Users] freeswan configuration issue (at least i hope so)

On Thu, 13 Feb 2003, Florian Maier wrote:

> Im also attaching my ISPs barf.

conn me-to-anyone

        left=%defaultroute
        right=%opportunistic
        keylife=1h
        rekey=no
        # for initiator only OE, uncomment and uncomment this 
        # after putting your key in your forward map 
        #leftid=@myhostname.example.com
        # uncomment this next line to enable it
        #auto=route

If you want to disable the OE connection, use auto=ignore. Don't comment out the OE connections because later versions of freeswan will still load automaticly, unless explicitely disabled.

+ cat /proc/sys/net/ipv4/ip_forward
0

Enable forwarding since you'r forwarding to subnets

default/rp_filter:1
eth0/rp_filter:1
ipsec0/rp_filter:1
lo/rp_filter:1

Set rp_filter to 0

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Paul