Eric,

That did it! The errors are gone. Now I've just got some configuration
warnings to deal with:

----------------------------------------------
ipsec_setup: Starting Openswan IPsec 1.0.9...
ipsec_setup: WARNING: eth0 has route filtering turned on, KLIPS may not
work
ipsec_setup:  (/proc/sys/net/ipv4/conf/eth0/rp_filter = `1', should be
0)
----------------------------------------------

"eth0" is the public Internet face of this router. I'm not sure yet if
route filtering should be turned on for this interface. I'm resetting it
to 0 for now.

Some posts I've read in other forums seem to imply that this may
actually be a problem in reconstructing headers
(re:https://lists.netfilter.org/pipermail/netfilter/2005-February.txt
Subj: set-mark, OUTPUT routing, martian addresses, rp_filter From:
idallen at idallen.ca).

Thanks for the help!

--Cal

On Wed, 2005-05-11 at 15:51, Eric Spakman wrote:
> Hello Cal,
> 
> You need the ipsec module from the kernel tarball, it can be found in 
> download area (where also the images are placed).
> 
> Eric
> 
> >Eric,
> >
> >This is really strange... I must have changed something else without
> >realizing it. Now I'm getting this, regardless of whether I'm using the
> >original or updated initrd.lrp:
> >
> >--------------------------------------------------------
> >ipsec_setup: Starting Openswan IPsec 1.0.9...
> >insmod: ipsec.o: no module by that name found
> >ipsec_setup: kernel appears to lack KLIPS
> >ipsec_setup: OOPS, should have aborted! Broken shell!
> >--------------------------------------------------------
> >
> >Where is ipsec.o? I haven't been able to locate it in modules.lrp or
> >ipsec.lrp.
> >
> >The errors changed after I had started my qemu VM with redirection. I
> >tried swapping back the original initrd.lrp to no avail. Now, it comes
> >up like this with or without redirected ports, with the old initrd.lrp
> >or new.
> >
> >It looks like the libm.lrp is loading. Here's the output of "lrpkg -l":
> >------------------------------------------------------
> >Name            Version        Description
> >===============-==============-==============================================
> >
> >
> 
> [Message truncated. Tap Edit->Mark for Download to get remaining portion.]
> 



-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7393&alloc_id=16281&op=click
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to