Re: [strongSwan] DNS resolution - revisisted

2010-01-02 Thread Martin Willi
Hi Daniel, Could you please comment on this. How can I pass FQDNs to charon? This is indeed currently not possible via starter. It works fine with other plugins (such as the network-manager plugin). But it would require some tweaks to explicitly not resolve hosts for connections passed to

Re: [strongSwan] DNS resolution - revisisted

2009-12-31 Thread Daniel Mentz
Andreas Steffen wrote: | right=home.example.com # bad addr: right=home.example.com [does not look numeric and name lookup failed] Well, if no default route exists then the host most probably is also not able to resolve hostnames via DNS. Did you try if nslookup works before starting the

[strongSwan] DNS resolution - revisisted

2009-12-30 Thread Daniel Mentz
Andreas Steffen wrote in his e-mail on dec 24: .the IKEv2 charon daemon receives the FQDN as a string via the stroke interface and does name resolution on the fly shortly before actually negotiating the IPsec tunnel. This appears not to work for me. The output of starter is as follows: