Package: freeswan
Version: 1.96-1.4
Severity: normal
Tags: patch
When i stop ipsec by calling the script '/etc/init.d/ipsec stop', the
defindet (left= or right=) IP is still on the ipsec-interface. This
prevents heartbeat from working correctly. If i stop heartbeat on node 1
and node 2 does a takeover (and sends gratuitous arp) all IP packets
are still sent to node 1. If i do a 'ip addr del x.x.x.x dev ipsecx)'
everything is fine. I did a workaround for /etc/init.d/ipsec to delete
all IP adresses from ipsec0 (this should be upgraded to all available
ipsec-interfaces). Here is my diff:
--- /etc/init.d/ipsec 2002-11-30 12:52:22.000000000 +0100
+++ /home/lembcke/freeswan/ipsec 2005-04-27 17:21:51.577799240
+0200
@@ -100,6 +100,13 @@
) 2>&1 | logger -s -p $IPSECsyslog -t ipsec_setup 2>&1
st=`cat $tmp`
rm -f $tmp
+ case "$1" in
+ stop|--stop|_autostop)
+ for i in $(ip ad show dev ipsec0|grep inet|awk
'{print $2}'); do
+ ip ad de "$i" dev ipsec0
+ done
+ ;;
+ esac
exit $st
;;
thanks for your time,
Matthias
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-razor.0
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Versions of packages freeswan depends on:
ii bsdmainutils 6.0.17 collection of more utilities from
ii debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii gawk 1:3.1.4-2 GNU awk, a pattern scanning and pr
ii host 20000331-9 utility for querying DNS servers
ii iproute 20041019-3 Professional tools to control the
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libcurl2 1:7.11.2-13 Multi-protocol file transfer libra
ii libgmp3 4.1.4-5 Multiprecision arithmetic library
ii libldap2 2.1.30-3 OpenLDAP libraries
ii libopensc0 0.8.1-7 SmartCard library with support for
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii makedev 2.3.1-77 creates device files in /dev
ii openssl 0.9.7e-3 Secure Socket Layer (SSL) binary a
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
