>>>> Peter Warasin <[EMAIL PROTECTED]> 24.12.2006 00:16 >>> >Thomas Heimann wrote: >> The only allowed pfs parameters in openswan 2.4.4 are >> pfs=no or yes. >> When I choose anything other than Phase 1 group at the >> web conf of IPSEC VPN the pfsgroup paramter is wrongly >> set in ipsec.conf. >> In 2.4.4 the pfsgroup is always the Phase 1 group. > >i looked into this today and applied your consideration. >i also upgraded to 2.4.7, which accepts also other pfsgroups >thank you for your help! > >peter > Hello Peter
the IPSEC settings in EFW 2.1 has changed but the resulting settings in ipsec.conf are still wrong. If i choose phase 1 group as esp group in the webinterface the setting in ipsec.conf is pfs =no if i choose anything other the setting in ipsec.conf is pfs=yes and pfsgroup is set. But the pfsgroup can't be set in openswan 2.4.x. it's always the phase 1 group. So the whole pfsgroup option is deprecated. The only option is to disable the ESP Group with pfs=no. Default is pfs=yes. So the ESP group setting should be removed from the interface and replaced by a an option pfs yes or no. Thomas >-- >:: e n d i a n >:: open source - open minds > >:: peter warasin >:: http://www.endian.it :: [EMAIL PROTECTED] > >------------------------------------------------------------------------- >Take Surveys. Earn Cash. Influence the Future of IT >Join SourceForge.net's Techsay panel and you'll get the chance to share your >opinions on IT & business topics through brief surveys - and earn cash >http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >_______________________________________________ >Efw-user mailing list >[email protected] >https://lists.sourceforge.net/lists/listinfo/efw-user -------------------------------------------------------------- SHS-Concept GbR Dipl.-Ing. Thomas Heimann Hagener Str.57 D-58642 Iserlohn Germany Tel.: +49 +2374 9209776 Mobil: 0160 94773968 Fax: +49 +2374 9209778 Ust-ID:DE813360908 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
