Your message dated Mon, 16 Jul 2007 15:34:40 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Closing freeswan bugs - superseded by openswan
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: freeswan
Version: 1.96-1.4
Severity: normal
Tags: patch

When i stop ipsec by calling the script '/etc/init.d/ipsec stop', the
defindet (left= or right=) IP is still on the ipsec-interface. This
prevents heartbeat from working correctly. If i stop heartbeat on node 1
and node 2 does a takeover (and sends gratuitous arp) all IP packets
are still sent to node 1. If i do a 'ip addr del x.x.x.x dev ipsecx)'
everything is fine. I did a workaround for /etc/init.d/ipsec to delete
all IP adresses from ipsec0 (this should be upgraded to all available
ipsec-interfaces). Here is my diff:

--- /etc/init.d/ipsec   2002-11-30 12:52:22.000000000 +0100
+++ /home/lembcke/freeswan/ipsec        2005-04-27 17:21:51.577799240
+0200
@@ -100,6 +100,13 @@
                ) 2>&1 | logger -s -p $IPSECsyslog -t ipsec_setup 2>&1
                st=`cat $tmp`
                rm -f $tmp
+               case "$1" in
+                       stop|--stop|_autostop)
+                       for i in $(ip ad show dev ipsec0|grep inet|awk
'{print $2}'); do
+                               ip ad de "$i" dev ipsec0
+                       done
+                       ;;
+               esac
                exit $st
        ;;

thanks for your time,

        Matthias


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-razor.0
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages freeswan depends on:
ii  bsdmainutils                6.0.17       collection of more utilities from 
ii  debconf                     1.4.30.13    Debian configuration management sy
ii  debianutils                 2.8.4        Miscellaneous utilities specific t
ii  gawk                        1:3.1.4-2    GNU awk, a pattern scanning and pr
ii  host                        20000331-9   utility for querying DNS servers
ii  iproute                     20041019-3   Professional tools to control the 
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libcurl2                    1:7.11.2-13  Multi-protocol file transfer libra
ii  libgmp3                     4.1.4-5      Multiprecision arithmetic library
ii  libldap2                    2.1.30-3     OpenLDAP libraries
ii  libopensc0                  0.8.1-7      SmartCard library with support for
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  makedev                     2.3.1-77     creates device files in /dev
ii  openssl                     0.9.7e-3     Secure Socket Layer (SSL) binary a


--- End Message ---
--- Begin Message ---
Hello,

This mail closes all the bugs reported against freeswan (I had two bugs in that
set so I decided to do this) (closing via BCC since 41 bugs are concerned).

As indicated by the description of the freeswan package, freeswan is dead
and superseded by openswan. If your problem still exists with openswan,
either reopen and reassign this bug or file a new one.

Description: IPSEC utilities transition package to Openswan
 FreeSWan is no longer maintained upstream and has been superseded by
 Openswan. This is a transition package which depends on openswan. It may be
 safely removed when openswan has been installed.

Thanks in advance.
-- 
Raphaël Hertzog

Premier livre français sur Debian GNU/Linux :
http://www.ouaza.com/livre/admin-debian/

--- End Message ---

Reply via email to