Re: [LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-05-02 Thread lartc
hi sylvain, yes it would! cheers charles On Fri, 2005-04-29 at 17:07 +0200, Sylvain BERTRAND wrote: > I've been looking around (kerneltrap, spennberg) and it looks like ipsec > is broken for 2.6.11... that might be a good explanation for my unsolvable > problem ;) > > > Sylvain > > > >

Re: [LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-04-29 Thread Sylvain BERTRAND
I've been looking around (kerneltrap, spennberg) and it looks like ipsec is broken for 2.6.11... that might be a good explanation for my unsolvable problem ;) Sylvain ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/

Re: [LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-04-29 Thread lartc
hi sylvain, yea -- i'm a little lost here as well. it appears that you have a tunnel and policy, therefore, i too am a bit confused. counters reflect 0 in setkey -D ... traffic is not using the tunnel. if i were you, i would start with a simple tunnel (psk) and watch what happens on each side wi

Re: [LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-04-28 Thread lartc
hi sylvain, what does "setkey -D" say? cheers charles On Thu, 2005-04-28 at 10:16 +0200, Sylvain BERTRAND wrote: > On Jeu 28 avril 2005 9:50, lartc a écrit : > > salut sylvain, > > > > to do your vpn, you'll need a little bit more policy (if you want to set > > your policy manually). here's an

Re: [LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-04-28 Thread lartc
salut sylvain, to do your vpn, you'll need a little bit more policy (if you want to set your policy manually). here's an example shell script to set policy: #!/sbin/setkey -f flush; spdflush; #==ESP== #| | #Network Left --- G

[LARTC] 26sec kame ipsec tunnel : packets leave unencrypted...

2005-04-27 Thread Sylvain BERTRAND
Hi everyone, First of all, this is my first post in this ML, so I'm not sure that this is the right place for my question (please don't shoot me down ;)). For the record, I've been reading and using LARTC for almost 3 years now, and it's a great help for anyone who wants to learn linux networking.