Package: racoon
Version: 1:0.6.1-1
Followup-For: Bug #267885
In a connection() section of racoon-util.con I specified:
spdadd_template: %default
This will cause racoon-tools to add SPD entries like this:
192.168.1.0/24[any] 10.0.1.0/24[any] any
in ipsec
ipcomp/tunnel/81.75.134.91-217.19.150.8/use
esp/tunnel/81.75.134.91-217.19.150.8/unique#16394
created: Oct 6 12:14:48 2005 lastused:
lifetime: 0(s) validtime: 0(s)
spid=16928 seq=9 pid=5704
refcnt=1
The problem with me is the "ipcomp" line. It seems that racoon-tool
uses some %spdadd_addons when using the built-in spdadd_template.
I solved the problem redefining the spdadd(%default) template in my
/etc/racoon/racoon-tool.conf (two long lines):
spdadd(%default): spdadd -4n ___src_range___ ___dst_range___ ___upperspec___ -P
out ipsec ___encap___/___mode___/___src_ip___-___dst_ip___/___level___;
spdadd(%default): spdadd -4n ___dst_range___ ___src_range___ ___upperspec___ -P
in ipsec ___encap___/___mode___/___dst_ip___-___src_ip___/___level___;
In this way no %spdadd_addons (and no ipcomp) are used.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages racoon depends on:
ii debconf [debconf-2.0] 1.4.58 Debian configuration management sy
ii ipsec-tools 1:0.6.1-1 IPsec tools for Linux
ii libc6 2.3.5-6 GNU C Library: Shared libraries an
ii libssl0.9.7 0.9.7g-2 SSL shared libraries
ii perl 5.8.7-3 Larry Wall's Practical Extraction
racoon recommends no packages.
-- debconf information:
* racoon/config_mode: racoon-tool
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
