Re: [Users] Help VPN and Windows 2000

Hello Sam, and everyone...

I patched the file and now it says OK when checking the RSA key. But the

Looking for TXT in forward map: MYMACHINE MISSING Looking for TXT in reverse map mypublicipbackwards.in-addr.arpa. MISSING

still appear. Maybe it doesn´t matter at all.

Anyway, i continued, and disabled the Opportunistic Encryption, and my computers started browsing the net again!!! Nice!!!! Thanks!!!

So i continued, and added the roadwarrior connection, and I´m trying to restart ipsec using the command ipsec setup restart, and the following message appears:

ipsec_setup: (/etc/ipsec.conf, line 48) section header "leftsubnet=172.16.0.0/24" has wrong number of fields (1) -- 'stop' aborted

The line says exactly what you told me, except the number itself, because it´s my private range.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

So which field I´m missing?

Balbino

• Original Message ----- From: "Sam Sgro" <sam@freeswan.org> To: <users@mj2.freeswan.org>; "Heishiro Mitsurugi" <mitsurugi@cantv.net> Sent: Thursday, October 02, 2003 11:29 PM Subject: Re: [Users] Need Help. No clue on how to make freeswan work.

> -----BEGIN PGP SIGNED MESSAGE-----
and
> > a file similar to the one that shows in the documentation appears.
> >
> > I didn´t change any of it.
>
> That's because it's a bug in 2.02's verify. You can apply the following
patch
> to /usr/local/libexec/ipsec/verify:
http://www.freeswan.org/freeswan_snaps/CURRENT-SNAP/doc/policygroups.html#disable_policygroups
>
> Alternatively, modify your firewall rules.
assume
> you're coming in from a public, dynamic IP. If you're coming from behind
NAT,
> this may complicate things. Let me know.) Add the following to ipsec.conf
on
> the FS side:
patch)
>
> http://www.natecarlson.com/include/showpage.php?cat=linux&page=ipsec-x509
is
> > going on. Can anyone help me, please? In fact, the scenario I´m looking
for
> > is possible?
you
> have questions, search the list archives:
Received on Fri Oct 3 20:11:28 2003