[Shorewall-users] Opportunistic encryption

Homer Parker
Wed, 30 Oct 2002 07:08:20 -0000

--=.wqjZy''jNmQd)D9
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

	Has anyone messed with opportunistic encryption in FreeS/WAN? As soon as
I run ipsec start, I get the following errors:

Oct 29 23:51:20 linux kernel: Shorewall:all2all:REJECT:IN= OUT=ipsec0
SRC=64.216.105.3 DST=192.203.230.10 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=0
DF PROTO=UDP SPT=33012 DPT=53 LEN=64
Oct 29 23:51:20 linux kernel: Shorewall:all2all:REJECT:IN= OUT=ipsec0
SRC=64.216.105.3 DST=208.191.32.1 LEN=70 TOS=0x00 PREC=0x00 TTL=64
ID=13340 DF PROTO=UDP SPT=33087 DPT=53 LEN=5

	As soon as I run ipsec stop, they stop... This system works fine for
normal IPSec tunnels, as I followed Tom''s great guides on his
informative
website ;) so I''m going to pass on posting configs this round.. I do
run a
DNS server on this box, so this shouldn''t be client requests... Again,
everything works fine until I try enabling OE... I searched the website,
and the mailing list archives and couldn''t find where this had been
discussed before... As usual, points, tips, tricks, smacks upside the back
of the head, or anything else that could be considered help appreciated ;)

---
Homer Parker

http://www.homershut.net
telnet://bbs.homershut.net

This e-mail message is 100% Microsoft free!

WARNING: THIS ACCOUNT BELONGS TO A RABID
ANTI-SPAMMER NET-NAZI DOT-COMMUNIST.

   /"\
   \ /     ASCII Ribbon Campaign
    X      Against HTML Mail
   / \

--=.wqjZy''jNmQd)D9
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9v4VnrgrN227HZ+8RAqprAJ0cUBzT3QOsbb/WQqik6EAvnI3CIgCcDqiT
vt13H2GVCD5W+0BjZSXTwnY=uFNe
-----END PGP SIGNATURE-----

--=.wqjZy''jNmQd)D9--