rendered paste bodysoroth
Mon Nov 16 07:19:53 UTC 2009
+ _________________________ version
+
+ ipsec --version
Linux Openswan U2.6.22/K2.6.31-302-rs (netkey)
See `ipsec --copyright' for copyright information.
+ _________________________ /proc/version
+
+ cat /proc/version
Linux version 2.6.31-302-rs (root@RSKERNELBUILD) (gcc version 4.4.1 (Ubuntu 4.4.1-4ubuntu8) ) #7 SMP Thu Oct 29 22:57:03 UTC 2009
+ _________________________ /proc/net/ipsec_eroute
+
+ test -r /proc/net/ipsec_eroute
+ _________________________ netstat-rn
+
+ netstat -nr
+ head -n 100
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
173.45.226.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 173.45.226.1 0.0.0.0 UG 0 0 0 eth0
+ _________________________ /proc/net/ipsec_spi
+
+ test -r /proc/net/ipsec_spi
+ _________________________ /proc/net/ipsec_spigrp
+
+ test -r /proc/net/ipsec_spigrp
+ _________________________ /proc/net/ipsec_tncfg
+
+ test -r /proc/net/ipsec_tncfg
+ _________________________ /proc/net/pfkey
+
+ test -r /proc/net/pfkey
+ cat /proc/net/pfkey
sk RefCnt Rmem Wmem User Inode
+ _________________________ ip-xfrm-state
+
+ ip xfrm state
+ _________________________ ip-xfrm-policy
+
+ ip xfrm policy
src ::/0 dst ::/0
dir 4 priority 0
src ::/0 dst ::/0
dir 3 priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
dir 4 priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
dir 3 priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
dir 4 priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
dir 3 priority 0
+ _________________________ /proc/crypto
+
+ test -r /proc/crypto
+ cat /proc/crypto
name : sha512
driver : sha512-generic
module : sha512_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 128
digestsize : 64
descsize : 208
name : sha384
driver : sha384-generic
module : sha512_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 128
digestsize : 48
descsize : 208
name : deflate
driver : deflate-generic
module : deflate
priority : 0
refcnt : 1
selftest : passed
type : compression
name : rfc3686(ctr(aes))
driver : rfc3686(ctr(aes-asm))
module : ctr
priority : 200
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 20
max keysize : 36
ivsize : 8
geniv : seqiv
name : ctr(aes)
driver : ctr(aes-asm)
module : ctr
priority : 200
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : cbc(twofish)
driver : cbc(twofish-generic)
module : cbc
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : twofish
driver : twofish-generic
module : twofish
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : cbc(camellia)
driver : cbc(camellia-generic)
module : cbc
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : camellia
driver : camellia-generic
module : camellia
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : cbc(serpent)
driver : cbc(serpent-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 0
max keysize : 32
ivsize : 16
geniv : <default>
name : tnepres
driver : tnepres-generic
module : serpent
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 0
max keysize : 32
name : serpent
driver : serpent-generic
module : serpent
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 0
max keysize : 32
name : cbc(aes)
driver : cbc(aes-asm)
module : cbc
priority : 200
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : cbc(blowfish)
driver : cbc(blowfish-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 4
max keysize : 56
ivsize : 8
geniv : <default>
name : blowfish
driver : blowfish-generic
module : blowfish
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 4
max keysize : 56
name : cbc(cast5)
driver : cbc(cast5-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 5
max keysize : 16
ivsize : 8
geniv : <default>
name : cast5
driver : cast5-generic
module : cast5
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 5
max keysize : 16
name : cbc(des3_ede)
driver : cbc(des3_ede-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 24
max keysize : 24
ivsize : 8
geniv : <default>
name : cbc(des)
driver : cbc(des-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 8
max keysize : 8
ivsize : 8
geniv : <default>
name : des3_ede
driver : des3_ede-generic
module : des_generic
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 24
max keysize : 24
name : des
driver : des-generic
module : des_generic
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 8
max keysize : 8
name : xcbc(aes)
driver : xcbc(aes-asm)
module : xcbc
priority : 200
refcnt : 1
selftest : passed
type : hash
blocksize : 16
digestsize : 16
name : aes
driver : aes-asm
module : aes_x86_64
priority : 200
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : aes
driver : aes-generic
module : aes_generic
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : hmac(rmd160)
driver : hmac(rmd160-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 20
name : rmd160
driver : rmd160-generic
module : rmd160
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 20
descsize : 96
name : hmac(sha256)
driver : hmac(sha256-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 32
name : sha256
driver : sha256-generic
module : sha256_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 32
descsize : 168
name : sha224
driver : sha224-generic
module : sha256_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 28
descsize : 168
name : hmac(sha1)
driver : hmac(sha1-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 20
name : sha1
driver : sha1-generic
module : sha1_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 20
descsize : 96
name : hmac(md5)
driver : hmac(md5-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 16
name : compress_null
driver : compress_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : compression
name : digest_null
driver : digest_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 1
digestsize : 0
descsize : 0
name : ecb(cipher_null)
driver : ecb-cipher_null
module : crypto_null
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 0
max keysize : 0
ivsize : 0
geniv : <default>
name : cipher_null
driver : cipher_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 1
min keysize : 0
max keysize : 0
name : stdrng
driver : krng
module : kernel
priority : 200
refcnt : 1
selftest : passed
type : rng
seedsize : 0
name : md5
driver : md5-generic
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 16
descsize : 88
+ __________________________/proc/sys/net/core/xfrm-star
/usr/lib/ipsec/barf: 1: __________________________/proc/sys/net/core/xfrm-star: not found
+ echo -n /proc/sys/net/core/xfrm_acq_expires:
/proc/sys/net/core/xfrm_acq_expires: + cat /proc/sys/net/core/xfrm_acq_expires
30
+ echo -n /proc/sys/net/core/xfrm_aevent_etime:
/proc/sys/net/core/xfrm_aevent_etime: + cat /proc/sys/net/core/xfrm_aevent_etime
10
+ echo -n /proc/sys/net/core/xfrm_aevent_rseqth:
/proc/sys/net/core/xfrm_aevent_rseqth: + cat /proc/sys/net/core/xfrm_aevent_rseqth
2
+ echo -n /proc/sys/net/core/xfrm_larval_drop:
/proc/sys/net/core/xfrm_larval_drop: + cat /proc/sys/net/core/xfrm_larval_drop
1
+ _________________________ /proc/sys/net/ipsec-star
+
+ test -d /proc/sys/net/ipsec
+ _________________________ ipsec/status
+
+ ipsec auto --status
000 using kernel interface: netkey
000 interface lo/lo ::1
000 interface lo/lo 127.0.0.1
000 interface eth0/eth0 173.45.226.50
000 %myid = (none)
000 debug none
000
000 virtual_private (%priv):
000 - allowed 4 subnets: 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 192.168.1.0/24
000 - disallowed 0 subnets:
000 WARNING: Either virtual_private= was not specified, or there was a syntax
000 error in that line. 'left/rightsubnet=%priv' will not work!
000
000 algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64
000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192
000 algorithm ESP encrypt: id=6, name=ESP_CAST, ivlen=8, keysizemin=40, keysizemax=128
000 algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448
000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0
000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=13, name=ESP_AES_CTR, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=14, name=ESP_AES_CCM_A, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=15, name=ESP_AES_CCM_B, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=16, name=ESP_AES_CCM_C, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=18, name=ESP_AES_GCM_A, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=19, name=ESP_AES_GCM_B, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=20, name=ESP_AES_GCM_C, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=22, name=ESP_CAMELLIA, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
000 algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256
000 algorithm ESP auth attr: id=8, name=AUTH_ALGORITHM_HMAC_RIPEMD, keysizemin=160, keysizemax=160
000 algorithm ESP auth attr: id=9, name=AUTH_ALGORITHM_AES_CBC, keysizemin=128, keysizemax=128
000 algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0
000
000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=131
000 algorithm IKE encrypt: id=3, name=OAKLEY_BLOWFISH_CBC, blocksize=8, keydeflen=128
000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
000 algorithm IKE encrypt: id=65004, name=OAKLEY_SERPENT_CBC, blocksize=16, keydeflen=128
000 algorithm IKE encrypt: id=65005, name=OAKLEY_TWOFISH_CBC, blocksize=16, keydeflen=128
000 algorithm IKE encrypt: id=65289, name=OAKLEY_TWOFISH_CBC_SSH, blocksize=16, keydeflen=128
000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32
000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64
000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
000
000 stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
000
000 "L2TP-PSK-NAT": 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...%virtual[+S=C]:17/0===?; unrouted; eroute owner: #0
000 "L2TP-PSK-NAT": myip=unset; hisip=unset;
000 "L2TP-PSK-NAT": ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "L2TP-PSK-NAT": policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
000 "L2TP-PSK-NAT": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "L2TP-PSK-NAT"[2]: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...58.37.166.10[192.168.1.200,+S=C]:17/0===?; unrouted; eroute owner: #0
000 "L2TP-PSK-NAT"[2]: myip=unset; hisip=unset;
000 "L2TP-PSK-NAT"[2]: ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "L2TP-PSK-NAT"[2]: policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
000 "L2TP-PSK-NAT"[2]: newest ISAKMP SA: #2; newest IPsec SA: #0;
000 "L2TP-PSK-NAT"[2]: IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1024
000 "L2TP-PSK-noNAT": 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...%any[+S=C]:17/0; unrouted; eroute owner: #0
000 "L2TP-PSK-noNAT": myip=unset; hisip=unset;
000 "L2TP-PSK-noNAT": ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "L2TP-PSK-noNAT": policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
000 "L2TP-PSK-noNAT": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "passthrough-for-non-l2tp": 173.45.226.50<173.45.226.50>[+S=C]---173.45.226.1...%any[+S=C]===0.0.0.0/0; unrouted; eroute owner: #0
000 "passthrough-for-non-l2tp": myip=unset; hisip=unset;
000 "passthrough-for-non-l2tp": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "passthrough-for-non-l2tp": policy: PFS+IKEv2ALLOW+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "passthrough-for-non-l2tp": newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000 #2: "L2TP-PSK-NAT"[2] 58.37.166.10:500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 3334s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; import:not set
000 #1: "L2TP-PSK-NAT"[2] 58.37.166.10:500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 1682s; lastdpd=-1s(seq in:0 out:0); idle; import:not set
000
+ _________________________ ifconfig-a
+
+ ifconfig -a
dummy0 Link encap:Ethernet HWaddr 32:28:fe:95:4b:42
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eql Link encap:Serial Line IP
MASTER MTU:576 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:5
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eth0 Link encap:Ethernet HWaddr 40:40:ac:dd:d4:24
inet addr:173.45.226.50 Bcast:173.45.226.255 Mask:255.255.255.0
inet6 addr: fe80::4240:acff:fedd:d424/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:300035 errors:0 dropped:0 overruns:0 frame:0
TX packets:278485 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:115517499 (115.5 MB) TX bytes:43411820 (43.4 MB)
ifb0 Link encap:Ethernet HWaddr 52:96:6d:9f:ad:19
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
ifb1 Link encap:Ethernet HWaddr c6:0b:37:d9:06:a5
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
+ _________________________ ip-addr-list
+
+ ip addr list
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 40:40:ac:dd:d4:24 brd ff:ff:ff:ff:ff:ff
inet 173.45.226.50/24 brd 173.45.226.255 scope global eth0
inet6 fe80::4240:acff:fedd:d424/64 scope link
valid_lft forever preferred_lft forever
3: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN
link/ether 32:28:fe:95:4b:42 brd ff:ff:ff:ff:ff:ff
4: ifb0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
link/ether 52:96:6d:9f:ad:19 brd ff:ff:ff:ff:ff:ff
5: ifb1: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
link/ether c6:0b:37:d9:06:a5 brd ff:ff:ff:ff:ff:ff
6: eql: <MASTER> mtu 576 qdisc noop state DOWN qlen 5
link/slip
+ _________________________ ip-route-list
+
+ ip route list
173.45.226.0/24 dev eth0 proto kernel scope link src 173.45.226.50
default via 173.45.226.1 dev eth0 metric 100
+ _________________________ ip-rule-list
+
+ ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
+ _________________________ ipsec_verify
+
+ ipsec verify --nocolour
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.22/K2.6.31-302-rs (netkey)
Checking for IPsec support in kernel [OK]
NETKEY detected, testing for disabled ICMP send_redirects [OK]
NETKEY detected, testing for disabled ICMP accept_redirects [OK]
Checking for RSA private key (/etc/ipsec.secrets) [OK]
Checking that pluto is running [OK]
Two or more interfaces found, checking IP forwarding [OK]
Checking NAT and MASQUERADEing [OK]
Checking for 'ip' command [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
+ _________________________ mii-tool
+
+ [ -x /sbin/mii-tool ]
+ /sbin/mii-tool -v
SIOCGMIIPHY on 'eth0' failed: Operation not supported
no MII interfaces found
+ _________________________ ipsec/directory
+
+ ipsec --directory
/usr/lib/ipsec
+ _________________________ hostname/fqdn
+
+ hostname --fqdn
soroth
+ _________________________ hostname/ipaddress
+
+ hostname --ip-address
173.45.226.50
+ _________________________ uptime
+
+ uptime
07:19:53 up 3 days, 14 min, 2 users, load average: 0.00, 0.00, 0.00
+ _________________________ ps
+
+ ps alxwf
+ egrep -i ppid|pluto|ipsec|klips
F UID PID PPID PRI NI VSZ RSS WCHAN STAT TTY TIME COMMAND
0 0 9214 3069 20 0 4004 624 wait S+ pts/2 0:00 \_ /bin/sh /usr/lib/ipsec/barf
0 0 9301 9214 20 0 6060 640 - S+ pts/2 0:00 \_ egrep -i ppid|pluto|ipsec|klips
1 0 8986 1 20 0 17600 556 wait S pts/2 0:00 /bin/bash /usr/lib/ipsec/_plutorun --debug --uniqueids yes --force_busy no --nocrsend no --strictcrlpolicy no --nat_traversal no --keep_alive --protostack netkey --force_keepalive no --disable_port_floating no --virtual_private %v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:192.168.1.0/24 --crlcheckinterval 0 --ocspuri --nhelpers --dump --opts --stderrlog --wait no --pre --post --log daemon.error --plutorestartoncrash true --pid /var/run/pluto/pluto.pid
1 0 8988 8986 20 0 17600 720 wait S pts/2 0:00 \_ /bin/bash /usr/lib/ipsec/_plutorun --debug --uniqueids yes --force_busy no --nocrsend no --strictcrlpolicy no --nat_traversal no --keep_alive --protostack netkey --force_keepalive no --disable_port_floating no --virtual_private %v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:192.168.1.0/24 --crlcheckinterval 0 --ocspuri --nhelpers --dump --opts --stderrlog --wait no --pre --post --log daemon.error --plutorestartoncrash true --pid /var/run/pluto/pluto.pid
4 0 8991 8988 20 0 62568 3120 poll_s S pts/2 0:00 | \_ /usr/lib/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --use-netkey --uniqueids --virtual_private %v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:192.168.1.0/24
1 0 8995 8991 30 10 62564 1212 unix_s SN pts/2 0:00 | \_ pluto helper # 0
1 0 8996 8991 30 10 62564 1240 unix_s SN pts/2 0:00 | \_ pluto helper # 1
1 0 8997 8991 30 10 62564 1240 unix_s SN pts/2 0:00 | \_ pluto helper # 2
0 0 9023 8991 20 0 5924 380 poll_s S pts/2 0:00 | \_ _pluto_adns
0 0 8992 8986 20 0 4004 600 pipe_w S pts/2 0:00 \_ /bin/sh /usr/lib/ipsec/_plutoload --wait no --post
0 0 8987 1 20 0 3908 624 pipe_w S pts/2 0:00 logger -s -p daemon.error -t ipsec__plutorun
+ _________________________ ipsec/showdefaults
+
+ ipsec showdefaults
routephys=eth0
routevirt=none
routeaddr=173.45.226.50
routenexthop=173.45.226.1
+ _________________________ ipsec/conf
+
+ ipsec _include /etc/ipsec.conf
+ ipsec _keycensor
#< /etc/ipsec.conf 1
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.16 2005/07/26 12:29:45 ken Exp $
# This file: /usr/share/doc/openswan/ipsec.conf-sample
#
# Manual: ipsec.conf.5
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
#nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:192.168.1.0/24
oe=off
protostack=netkey
# Add connections here
# sample VPN connection
# for more examples, see /etc/ipsec.d/examples/
#conn sample
# # Left security gateway, subnet behind it, nexthop toward right.
# left=10.0.0.1
# leftsubnet=172.16.0.0/24
# leftnexthop=10.22.33.44
# # Right security gateway, subnet behind it, nexthop toward left.
# right=10.12.12.1
# rightsubnet=192.168.0.0/24
# rightnexthop=10.101.102.103
# # To authorize this connection, but not actually start it,
# # at startup, uncomment this.
# #auto=start
#< /etc/ipsec.d/l2tp-psk.conf 1
conn L2TP-PSK-NAT
rightsubnet=vhost:%priv
also=L2TP-PSK-noNAT
conn L2TP-PSK-noNAT
authby=secret
pfs=no
auto=add
keyingtries=3
rekey=no
ikelifetime=8h
keylife=1h
type=transport
left=173.45.226.50
leftnexthop=%defaultroute
leftprotoport=17/1701
right=%any
rightprotoport=17/0
conn passthrough-for-non-l2tp
type=passthrough
left=173.45.226.50
leftnexthop=%defaultroute
right=0.0.0.0
rightsubnet=0.0.0.0/0
auto=route
#> /etc/ipsec.conf 37
+ _________________________ ipsec/secrets
+
+ ipsec _include /etc/ipsec.secrets
+ ipsec _secretcensor
#< /etc/ipsec.secrets 1
# RCSID $Id: ipsec.secrets.proto,v 1.3.6.1 2005/09/28 13:59:14 paul Exp $
# This file holds shared secrets or RSA private keys for inter-Pluto
# authentication. See ipsec_pluto(8) manpage, and HTML documentation.
# RSA private key for this host, authenticating it to any other host
# which knows the public part. Suitable public keys, for ipsec.conf, DNS,
# or configuration of other implementations, can be extracted conveniently
# with "[sums to ef67...]".
%any %any : PSK "[sums to 2867...]"
+ _________________________ ipsec/listall
+
+ ipsec auto --listall
000
000 List of Public Keys:
000
000 List of Pre-shared secrets (from /etc/ipsec.secrets)
000 10: PSK %any %any
+ [ /etc/ipsec.d/policies ]
+ basename /etc/ipsec.d/policies/block
+ base=block
+ _________________________ ipsec/policies/block
+
+ cat /etc/ipsec.d/policies/block
# This file defines the set of CIDRs (network/mask-length) to which
# communication should never be allowed.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: block.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/clear
+ base=clear
+ _________________________ ipsec/policies/clear
+
+ cat /etc/ipsec.d/policies/clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be in the clear.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# root name servers should be in the clear
192.58.128.30/32
198.41.0.4/32
192.228.79.201/32
192.33.4.12/32
128.8.10.90/32
192.203.230.10/32
192.5.5.241/32
192.112.36.4/32
128.63.2.53/32
192.36.148.17/32
193.0.14.129/32
199.7.83.42/32
202.12.27.33/32
+ basename /etc/ipsec.d/policies/clear-or-private
+ base=clear-or-private
+ _________________________ ipsec/policies/clear-or-private
+
+ cat /etc/ipsec.d/policies/clear-or-private
# This file defines the set of CIDRs (network/mask-length) to which
# we will communicate in the clear, or, if the other side initiates IPSEC,
# using encryption. This behaviour is also called "Opportunistic Responder".
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: clear-or-private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/private
+ base=private
+ _________________________ ipsec/policies/private
+
+ cat /etc/ipsec.d/policies/private
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be private (i.e. encrypted).
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/private-or-clear
+ base=private-or-clear
+ _________________________ ipsec/policies/private-or-clear
+
+ cat /etc/ipsec.d/policies/private-or-clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should be private, if possible, but in the clear otherwise.
#
# If the target has a TXT (later IPSECKEY) record that specifies
# authentication material, we will require private (i.e. encrypted)
# communications. If no such record is found, communications will be
# in the clear.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: private-or-clear.in,v 1.5 2003/02/17 02:22:15 mcr Exp $
#
0.0.0.0/0
+ _________________________ ipsec/ls-libdir
+
+ ls -l /usr/lib/ipsec
total 2608
-rwxr-xr-x 1 root root 10712 Sep 26 13:44 _copyright
-rwxr-xr-x 1 root root 2379 Sep 26 13:44 _include
-rwxr-xr-x 1 root root 1475 Sep 26 13:44 _keycensor
-rwxr-xr-x 1 root root 14776 Sep 26 13:44 _pluto_adns
-rwxr-xr-x 1 root root 2632 Sep 26 13:44 _plutoload
-rwxr-xr-x 1 root root 7621 Sep 26 13:44 _plutorun
-rwxr-xr-x 1 root root 12943 Sep 26 13:44 _realsetup
-rwxr-xr-x 1 root root 1975 Sep 26 13:44 _secretcensor
-rwxr-xr-x 1 root root 8567 Sep 26 13:44 _startklips
-rwxr-xr-x 1 root root 8567 Sep 26 13:44 _startklips.old
-rwxr-xr-x 1 root root 5917 Sep 26 13:44 _startnetkey
-rwxr-xr-x 1 root root 4868 Sep 26 13:44 _updown
-rwxr-xr-x 1 root root 14022 Sep 26 13:44 _updown.klips
-rwxr-xr-x 1 root root 14022 Sep 26 13:44 _updown.klips.old
-rwxr-xr-x 1 root root 11792 Sep 26 13:44 _updown.mast
-rwxr-xr-x 1 root root 11792 Sep 26 13:44 _updown.mast.old
-rwxr-xr-x 1 root root 8530 Sep 26 13:44 _updown.netkey
-rwxr-xr-x 1 root root 214304 Sep 26 13:44 addconn
-rwxr-xr-x 1 root root 6129 Sep 26 13:44 auto
-rwxr-xr-x 1 root root 10816 Sep 26 13:44 barf
-rwxr-xr-x 1 root root 103336 Sep 26 13:44 eroute
-rwxr-xr-x 1 root root 27120 Sep 26 13:44 ikeping
-rwxr-xr-x 1 root root 74800 Sep 26 13:44 klipsdebug
-rwxr-xr-x 1 root root 2591 Sep 26 13:44 look
-rwxr-xr-x 1 root root 2182 Sep 26 13:44 newhostkey
-rwxr-xr-x 1 root root 66088 Sep 26 13:44 pf_key
-rwxr-xr-x 1 root root 1137712 Sep 26 13:44 pluto
-rwxr-xr-x 1 root root 10888 Sep 26 13:44 ranbits
-rwxr-xr-x 1 root root 23784 Sep 26 13:44 rsasigkey
-rwxr-xr-x 1 root root 766 Sep 26 13:44 secrets
lrwxrwxrwx 1 root root 17 Nov 13 06:59 setup -> /etc/init.d/ipsec
-rwxr-xr-x 1 root root 1054 Sep 26 13:44 showdefaults
-rwxr-xr-x 1 root root 290360 Sep 26 13:44 showhostkey
-rwxr-xr-x 1 root root 27272 Sep 26 13:44 showpolicy
-rwxr-xr-x 1 root root 161736 Sep 26 13:44 spi
-rwxr-xr-x 1 root root 86816 Sep 26 13:44 spigrp
-rwxr-xr-x 1 root root 78280 Sep 26 13:44 tncfg
-rwxr-xr-x 1 root root 13368 Sep 26 13:44 verify
-rwxr-xr-x 1 root root 64536 Sep 26 13:44 whack
+ _________________________ ipsec/ls-execdir
+
+ ls -l /usr/lib/ipsec
total 2608
-rwxr-xr-x 1 root root 10712 Sep 26 13:44 _copyright
-rwxr-xr-x 1 root root 2379 Sep 26 13:44 _include
-rwxr-xr-x 1 root root 1475 Sep 26 13:44 _keycensor
-rwxr-xr-x 1 root root 14776 Sep 26 13:44 _pluto_adns
-rwxr-xr-x 1 root root 2632 Sep 26 13:44 _plutoload
-rwxr-xr-x 1 root root 7621 Sep 26 13:44 _plutorun
-rwxr-xr-x 1 root root 12943 Sep 26 13:44 _realsetup
-rwxr-xr-x 1 root root 1975 Sep 26 13:44 _secretcensor
-rwxr-xr-x 1 root root 8567 Sep 26 13:44 _startklips
-rwxr-xr-x 1 root root 8567 Sep 26 13:44 _startklips.old
-rwxr-xr-x 1 root root 5917 Sep 26 13:44 _startnetkey
-rwxr-xr-x 1 root root 4868 Sep 26 13:44 _updown
-rwxr-xr-x 1 root root 14022 Sep 26 13:44 _updown.klips
-rwxr-xr-x 1 root root 14022 Sep 26 13:44 _updown.klips.old
-rwxr-xr-x 1 root root 11792 Sep 26 13:44 _updown.mast
-rwxr-xr-x 1 root root 11792 Sep 26 13:44 _updown.mast.old
-rwxr-xr-x 1 root root 8530 Sep 26 13:44 _updown.netkey
-rwxr-xr-x 1 root root 214304 Sep 26 13:44 addconn
-rwxr-xr-x 1 root root 6129 Sep 26 13:44 auto
-rwxr-xr-x 1 root root 10816 Sep 26 13:44 barf
-rwxr-xr-x 1 root root 103336 Sep 26 13:44 eroute
-rwxr-xr-x 1 root root 27120 Sep 26 13:44 ikeping
-rwxr-xr-x 1 root root 74800 Sep 26 13:44 klipsdebug
-rwxr-xr-x 1 root root 2591 Sep 26 13:44 look
-rwxr-xr-x 1 root root 2182 Sep 26 13:44 newhostkey
-rwxr-xr-x 1 root root 66088 Sep 26 13:44 pf_key
-rwxr-xr-x 1 root root 1137712 Sep 26 13:44 pluto
-rwxr-xr-x 1 root root 10888 Sep 26 13:44 ranbits
-rwxr-xr-x 1 root root 23784 Sep 26 13:44 rsasigkey
-rwxr-xr-x 1 root root 766 Sep 26 13:44 secrets
lrwxrwxrwx 1 root root 17 Nov 13 06:59 setup -> /etc/init.d/ipsec
-rwxr-xr-x 1 root root 1054 Sep 26 13:44 showdefaults
-rwxr-xr-x 1 root root 290360 Sep 26 13:44 showhostkey
-rwxr-xr-x 1 root root 27272 Sep 26 13:44 showpolicy
-rwxr-xr-x 1 root root 161736 Sep 26 13:44 spi
-rwxr-xr-x 1 root root 86816 Sep 26 13:44 spigrp
-rwxr-xr-x 1 root root 78280 Sep 26 13:44 tncfg
-rwxr-xr-x 1 root root 13368 Sep 26 13:44 verify
-rwxr-xr-x 1 root root 64536 Sep 26 13:44 whack
+ _________________________ /proc/net/dev
+
+ cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth0:115517565 300036 0 0 0 0 0 0 43411820 278485 0 0 0 0 0 0
dummy0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ifb0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ifb1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eql: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
+ _________________________ /proc/net/route
+
+ cat /proc/net/route
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
eth0 00E22DAD 00000000 0001 0 0 0 00FFFFFF 0 0 0
eth0 00000000 01E22DAD 0003 0 0 100 00000000 0 0 0
+ _________________________ /proc/sys/net/ipv4/ip_no_pmtu_disc
+
+ cat /proc/sys/net/ipv4/ip_no_pmtu_disc
0
+ _________________________ /proc/sys/net/ipv4/ip_forward
+
+ cat /proc/sys/net/ipv4/ip_forward
1
+ _________________________ /proc/sys/net/ipv4/tcp_ecn
+
+ cat /proc/sys/net/ipv4/tcp_ecn
2
+ _________________________ /proc/sys/net/ipv4/conf/star-rp_filter
+
+ cd /proc/sys/net/ipv4/conf
+ egrep ^ all/rp_filter default/rp_filter dummy0/rp_filter eql/rp_filter eth0/rp_filter ifb0/rp_filter ifb1/rp_filter lo/rp_filter
all/rp_filter:1
default/rp_filter:1
dummy0/rp_filter:1
eql/rp_filter:1
eth0/rp_filter:1
ifb0/rp_filter:1
ifb1/rp_filter:1
lo/rp_filter:1
+ _________________________ /proc/sys/net/ipv4/conf/star-star-redirects
+
+ cd /proc/sys/net/ipv4/conf
+ egrep ^ all/accept_redirects all/secure_redirects all/send_redirects default/accept_redirects default/secure_redirects default/send_redirects dummy0/accept_redirects dummy0/secure_redirects dummy0/send_redirects eql/accept_redirects eql/secure_redirects eql/send_redirects eth0/accept_redirects eth0/secure_redirects eth0/send_redirects ifb0/accept_redirects ifb0/secure_redirects ifb0/send_redirects ifb1/accept_redirects ifb1/secure_redirects ifb1/send_redirects lo/accept_redirects lo/secure_redirects lo/send_redirects
all/accept_redirects:0
all/secure_redirects:1
all/send_redirects:0
default/accept_redirects:0
default/secure_redirects:1
default/send_redirects:0
dummy0/accept_redirects:0
dummy0/secure_redirects:1
dummy0/send_redirects:0
eql/accept_redirects:0
eql/secure_redirects:1
eql/send_redirects:0
eth0/accept_redirects:0
eth0/secure_redirects:1
eth0/send_redirects:0
ifb0/accept_redirects:0
ifb0/secure_redirects:1
ifb0/send_redirects:0
ifb1/accept_redirects:0
ifb1/secure_redirects:1
ifb1/send_redirects:0
lo/accept_redirects:1
lo/secure_redirects:1
lo/send_redirects:1
+ _________________________ /proc/sys/net/ipv4/tcp_window_scaling
+
+ cat /proc/sys/net/ipv4/tcp_window_scaling
1
+ _________________________ /proc/sys/net/ipv4/tcp_adv_win_scale
+
+ cat /proc/sys/net/ipv4/tcp_adv_win_scale
2
+ _________________________ uname-a
+
+ uname -a
Linux soroth 2.6.31-302-rs #7 SMP Thu Oct 29 22:57:03 UTC 2009 x86_64 GNU/Linux
+ _________________________ config-built-with
+
+ test -r /proc/config_built_with
+ _________________________ distro-release
+
+ test -f /etc/redhat-release
+ test -f /etc/debian-release
+ test -f /etc/SuSE-release
+ test -f /etc/mandrake-release
+ test -f /etc/mandriva-release
+ test -f /etc/gentoo-release
+ _________________________ /proc/net/ipsec_version
+
+ test -r /proc/net/ipsec_version
+ test -r /proc/net/pfkey
+ uname -r
+ echo NETKEY (2.6.31-302-rs) support detected
NETKEY (2.6.31-302-rs) support detected
+ _________________________ iptables
+
+ test -r /sbin/iptables
+ iptables -L -v -n
Chain INPUT (policy ACCEPT 1094 packets, 84296 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT esp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * * 0.0.0.0/0 12.34.56.78 udp dpt:500
0 0 ACCEPT udp -- * * 0.0.0.0/0 12.34.56.78 udp dpt:4500
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 policy match dir in pol ipsec udp dpt:1701
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- ppp+ * 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED
Chain OUTPUT (policy ACCEPT 669 packets, 160K bytes)
pkts bytes target prot opt in out source destination
+ _________________________ iptables-nat
+
+ iptables -t nat -L -v -n
Chain PREROUTING (policy ACCEPT 88 packets, 5216 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 1 packets, 116 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1 packets, 116 bytes)
pkts bytes target prot opt in out source destination
+ _________________________ iptables-mangle
+
+ iptables -t mangle -L -v -n
Chain PREROUTING (policy ACCEPT 301 packets, 23028 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 301 packets, 23028 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 182 packets, 43060 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 182 packets, 43060 bytes)
pkts bytes target prot opt in out source destination
+ _________________________ /proc/modules
+
+ test -f /proc/modules
+ cat /proc/modules
iptable_mangle 3136 0 - Live 0xffffffffa11e4000
xfrm_user 24736 2 - Live 0xffffffffa11ba000
ah6 6592 0 - Live 0xffffffffa11b3000
ah4 5920 0 - Live 0xffffffffa11ac000
esp6 7008 0 - Live 0xffffffffa11a5000
esp4 7360 0 - Live 0xffffffffa119e000
xfrm4_mode_beet 3040 0 - Live 0xffffffffa1198000
xfrm4_tunnel 2816 0 - Live 0xffffffffa1192000
xfrm4_mode_tunnel 2944 0 - Live 0xffffffffa118c000
xfrm4_mode_transport 2208 0 - Live 0xffffffffa1186000
xfrm6_mode_transport 2272 0 - Live 0xffffffffa1180000
xfrm6_mode_ro 2112 0 - Live 0xffffffffa117a000
xfrm6_mode_beet 2912 0 - Live 0xffffffffa1174000
xfrm6_mode_tunnel 2816 0 - Live 0xffffffffa116e000
ipcomp 3584 0 - Live 0xffffffffa1168000
ipcomp6 3712 0 - Live 0xffffffffa1162000
xfrm6_tunnel 9248 1 ipcomp6, Live 0xffffffffa115a000
af_key 32048 0 - Live 0xffffffffa1140000
iptable_nat 5888 0 - Live 0xffffffffa1139000
nf_nat 22036 1 iptable_nat, Live 0xffffffffa112e000
nf_conntrack_ipv4 16056 4 iptable_nat,nf_nat, Live 0xffffffffa1081000
nf_defrag_ipv4 2400 1 nf_conntrack_ipv4, Live 0xffffffffa107b000
xt_state 2432 1 - Live 0xffffffffa1075000
nf_conntrack 79936 4 iptable_nat,nf_nat,nf_conntrack_ipv4,xt_state, Live 0xffffffffa105c000
xt_policy 3456 1 - Live 0xffffffffa1056000
xt_tcpudp 3552 3 - Live 0xffffffffa1050000
iptable_filter 3136 1 - Live 0xffffffffa104a000
ip_tables 20656 3 iptable_mangle,iptable_nat,iptable_filter, Live 0xffffffffa103f000
x_tables 25224 5 iptable_nat,xt_state,xt_policy,xt_tcpudp,ip_tables, Live 0xffffffffa1033000
ccm 10496 0 - Live 0xffffffffa02b7000
ecb 3296 0 - Live 0xffffffffa02b1000
sha512_generic 5760 0 - Live 0xffffffffa02aa000
tunnel4 3888 1 xfrm4_tunnel, Live 0xffffffffa0252000
xfrm_ipcomp 6956 2 ipcomp,ipcomp6, Live 0xffffffffa021e000
tunnel6 3728 1 xfrm6_tunnel, Live 0xffffffffa0210000
deflate 3552 0 - Live 0xffffffffa01fd000
zlib_deflate 22584 1 deflate, Live 0xffffffffa01f5000
ctr 5088 0 - Live 0xffffffffa01ee000
twofish 6560 0 - Live 0xffffffffa01e7000
twofish_common 15200 1 twofish, Live 0xffffffffa01e1000
camellia 19776 0 - Live 0xffffffffa01d7000
serpent 19040 0 - Live 0xffffffffa01cd000
blowfish 8512 0 - Live 0xffffffffa01c5000
cast5 15904 0 - Live 0xffffffffa01bc000
des_generic 17408 0 - Live 0xffffffffa01b2000
cbc 4128 0 - Live 0xffffffffa01ab000
cryptd 7944 0 - Live 0xffffffffa0194000
aes_x86_64 8992 0 - Live 0xffffffffa018c000
aes_generic 28480 1 aes_x86_64, Live 0xffffffffa0180000
xcbc 5544 0 - Live 0xffffffffa0179000
rmd160 8768 0 - Live 0xffffffffa0171000
sha256_generic 10720 0 - Live 0xffffffffa0162000
sha1_generic 2656 0 - Live 0xffffffffa0155000
crypto_null 3872 0 - Live 0xffffffffa014f000
ipv6 308096 29 ah6,esp6,xfrm6_mode_beet,xfrm6_mode_tunnel,ipcomp6,xfrm6_tunnel,tunnel6, Live 0xffffffffa00f1000
raid10 24736 0 - Live 0xffffffffa00e5000
raid456 59104 0 - Live 0xffffffffa00d1000
raid6_pq 80928 1 raid456, Live 0xffffffffa00b8000
async_xor 3008 1 raid456, Live 0xffffffffa00b2000
async_memcpy 2144 1 raid456, Live 0xffffffffa00ac000
async_tx 3424 3 raid456,async_xor,async_memcpy, Live 0xffffffffa00a6000
xor 5776 2 raid456,async_xor, Live 0xffffffffa009f000
raid1 25472 0 - Live 0xffffffffa0093000
raid0 8260 0 - Live 0xffffffffa008b000
multipath 9060 0 - Live 0xffffffffa0083000
linear 5604 0 - Live 0xffffffffa007c000
md_mod 101252 6 raid10,raid456,raid1,raid0,multipath,linear, Live 0xffffffffa005e000
dm_mirror 16872 0 - Live 0xffffffffa0054000
dm_region_hash 14048 1 dm_mirror, Live 0xffffffffa004e000
dm_log 11204 2 dm_mirror,dm_region_hash, Live 0xffffffffa0046000
dm_snapshot 25932 0 - Live 0xffffffffa003a000
dm_mod 79784 3 dm_mirror,dm_log,dm_snapshot, Live 0xffffffffa0021000
fuse 70752 1 - Live 0xffffffffa000a000
loop 18988 0 - Live 0xffffffffa0000000
+ _________________________ /proc/meminfo
+
+ cat /proc/meminfo
MemTotal: 329036 kB
MemFree: 62836 kB
Buffers: 38384 kB
Cached: 101896 kB
SwapCached: 0 kB
Active: 88960 kB
Inactive: 62252 kB
Active(anon): 7516 kB
Inactive(anon): 3824 kB
Active(file): 81444 kB
Inactive(file): 58428 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 524280 kB
SwapFree: 524280 kB
Dirty: 52 kB
Writeback: 0 kB
AnonPages: 10864 kB
Mapped: 5812 kB
Slab: 22512 kB
SReclaimable: 10176 kB
SUnreclaim: 12336 kB
PageTables: 0 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 688796 kB
Committed_AS: 52604 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 3084 kB
VmallocChunk: 34359733587 kB
DirectMap4k: 262144 kB
DirectMap2M: 0 kB
+ _________________________ /proc/net/ipsec-ls
+
+ test -f /proc/net/ipsec_version
+ _________________________ usr/src/linux/.config
+
+ test -f /proc/config.gz
+ uname -r
+ test -f /lib/modules/2.6.31-302-rs/build/.config
+ echo no .config file found, cannot list kernel properties
no .config file found, cannot list kernel properties
+ _________________________ etc/syslog.conf
+
+ _________________________ etc/syslog-ng/syslog-ng.conf
+
+ cat /etc/syslog-ng/syslog-ng.conf
cat: /etc/syslog-ng/syslog-ng.conf: No such file or directory
+ cat /etc/syslog.conf
cat: /etc/syslog.conf: No such file or directory
+ _________________________ etc/resolv.conf
+
+ cat /etc/resolv.conf
nameserver 173.45.224.4
nameserver 173.45.224.5+ _________________________ lib/modules-ls
+
+ ls -ltr /lib/modules
total 4
drwxr-xr-x 4 root root 4096 Oct 30 16:29 2.6.31-302-rs
+ _________________________ fipscheck
+
+ cat /proc/sys/crypto/fips_enabled
cat: /proc/sys/crypto/fips_enabled: No such file or directory
+ _________________________ /proc/ksyms-netif_rx
+
+ test -r /proc/ksyms
+ test -r /proc/kallsyms
+ egrep netif_rx /proc/kallsyms
ffffffff804989c0 T netif_rx
ffffffff80498d10 T netif_rx_ni
ffffffff80695fd0 r __ksymtab_netif_rx
ffffffff80696340 r __ksymtab_netif_rx_ni
ffffffff806a13f8 r __kcrctab_netif_rx
ffffffff806a15b0 r __kcrctab_netif_rx_ni
ffffffff806b2dd4 r __kstrtab_netif_rx
ffffffff806b3196 r __kstrtab_netif_rx_ni
ffffffff804989c0 u netif_rx [ipv6]
+ _________________________ lib/modules-netif_rx
+
+ modulegoo kernel/net/ipv4/ipip.o netif_rx
+ set +x
2.6.31-302-rs:
+ _________________________ kern.debug
+
+ test -f /var/log/kern.debug
+ _________________________ klog
+
+ sed -n 523,$p /var/log/syslog
+ egrep -i ipsec|klips|pluto
+ cat
Nov 16 06:47:48 soroth ipsec_setup: Starting Openswan IPsec U2.6.22/K2.6.31-302-rs...
Nov 16 06:47:48 soroth ipsec_setup: Using NETKEY(XFRM) stack
Nov 16 06:47:49 soroth ipsec_setup: ...Openswan IPsec started
Nov 16 06:47:49 soroth pluto: adjusting ipsec.d to /etc/ipsec.d
Nov 16 06:47:49 soroth ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d
Nov 16 06:47:49 soroth ipsec__plutorun: 002 added connection description "L2TP-PSK-NAT"
Nov 16 06:47:49 soroth ipsec__plutorun: 002 added connection description "L2TP-PSK-noNAT"
Nov 16 06:47:49 soroth ipsec__plutorun: 002 added connection description "passthrough-for-non-l2tp"
+ _________________________ plog
+
+ sed -n 43868,$p /var/log/auth.log
+ cat
+ egrep -i pluto
Nov 16 06:47:49 soroth ipsec__plutorun: Starting Pluto subsystem...
Nov 16 06:47:49 soroth pluto[8991]: Starting Pluto (Openswan Version 2.6.22; Vendor ID OElj@]rTMBuM) pid:8991
Nov 16 06:47:49 soroth pluto[8991]: Setting NAT-Traversal port-4500 floating to off
Nov 16 06:47:49 soroth pluto[8991]: port floating activation criteria nat_t=0/port_float=1
Nov 16 06:47:49 soroth pluto[8991]: including NAT-Traversal patch (Version 0.6c) [disabled]
Nov 16 06:47:49 soroth pluto[8991]: using /dev/urandom as source of random entropy
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: starting up 3 cryptographic helpers
Nov 16 06:47:49 soroth pluto[8995]: using /dev/urandom as source of random entropy
Nov 16 06:47:49 soroth pluto[8991]: started helper pid=8995 (fd:7)
Nov 16 06:47:49 soroth pluto[8991]: started helper pid=8996 (fd:8)
Nov 16 06:47:49 soroth pluto[8991]: started helper pid=8997 (fd:9)
Nov 16 06:47:49 soroth pluto[8991]: Using Linux 2.6 IPsec interface code on 2.6.31-302-rs (experimental code)
Nov 16 06:47:49 soroth pluto[8996]: using /dev/urandom as source of random entropy
Nov 16 06:47:49 soroth pluto[8997]: using /dev/urandom as source of random entropy
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: Ok (ret=0)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_add(): ERROR: Algorithm already exists
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_add(): ERROR: Algorithm already exists
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_add(): ERROR: Algorithm already exists
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_add(): ERROR: Algorithm already exists
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_add(): ERROR: Algorithm already exists
Nov 16 06:47:49 soroth pluto[8991]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 16 06:47:49 soroth pluto[8991]: Changed path to directory '/etc/ipsec.d/cacerts'
Nov 16 06:47:49 soroth pluto[8991]: Changed path to directory '/etc/ipsec.d/aacerts'
Nov 16 06:47:49 soroth pluto[8991]: Changed path to directory '/etc/ipsec.d/ocspcerts'
Nov 16 06:47:49 soroth pluto[8991]: Changing to directory '/etc/ipsec.d/crls'
Nov 16 06:47:49 soroth pluto[8991]: Warning: empty directory
Nov 16 06:47:49 soroth pluto[8991]: added connection description "L2TP-PSK-NAT"
Nov 16 06:47:49 soroth pluto[8991]: added connection description "L2TP-PSK-noNAT"
Nov 16 06:47:49 soroth pluto[8991]: added connection description "passthrough-for-non-l2tp"
Nov 16 06:47:49 soroth pluto[8991]: listening for IKE messages
Nov 16 06:47:49 soroth pluto[8991]: adding interface eth0/eth0 173.45.226.50:500
Nov 16 06:47:49 soroth pluto[8991]: adding interface lo/lo 127.0.0.1:500
Nov 16 06:47:49 soroth pluto[8991]: adding interface lo/lo ::1:500
Nov 16 06:47:49 soroth pluto[8991]: loading secrets from "/etc/ipsec.secrets"
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [RFC 3947] meth=109, but port floating is off
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] meth=110, but port floating is off
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but port floating is off
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but port floating is off
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port floating is off
Nov 16 06:47:55 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [Dead Peer Detection]
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: responding to Main Mode from unknown peer 58.37.166.10
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.200'
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[1] 58.37.166.10 #1: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.166.10 {isakmp=#0/ipsec=#0}
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 16 06:47:55 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
Nov 16 06:47:56 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Nov 16 06:47:56 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: received and ignored informational message
Nov 16 06:47:56 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 06:47:56 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50725===192.168.1.200/32
Nov 16 06:47:56 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
Nov 16 06:48:06 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 06:48:06 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50725===192.168.1.200/32
Nov 16 06:48:06 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
Nov 16 06:48:16 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 06:48:16 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50725===192.168.1.200/32
Nov 16 06:48:16 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #1: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [RFC 3947] meth=109, but port floating is off
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] meth=110, but port floating is off
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but port floating is off
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but port floating is off
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port floating is off
Nov 16 07:15:26 soroth pluto[8991]: packet from 58.37.166.10:500: received Vendor ID payload [Dead Peer Detection]
Nov 16 07:15:26 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: responding to Main Mode from unknown peer 58.37.166.10
Nov 16 07:15:26 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 16 07:15:26 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.200'
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Nov 16 07:15:27 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: received and ignored informational message
Nov 16 07:15:28 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 07:15:28 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50736===192.168.1.200/32
Nov 16 07:15:28 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
Nov 16 07:15:38 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 07:15:38 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50736===192.168.1.200/32
Nov 16 07:15:38 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
Nov 16 07:15:48 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 16 07:15:48 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: cannot respond to IPsec SA request because no connection is known for 173.45.226.50<173.45.226.50>[+S=C]:17/1701...58.37.166.10[192.168.1.200,+S=C]:17/50736===192.168.1.200/32
Nov 16 07:15:48 soroth pluto[8991]: "L2TP-PSK-NAT"[2] 58.37.166.10 #2: sending encrypted notification INVALID_ID_INFORMATION to 58.37.166.10:500
+ _________________________ date
+
+ date
Mon Nov 16 07:19:54 UTC 2009