rendered paste body000 interface ipsec0/eth0 205.150.200.247
000 interface ipsec0/eth0 205.150.200.247
000 %myid = @marajade.sandelman.ca.
000 debug control+dns+oppo
000
000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=64, keysizemin=192, keysizemax=192
000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=128, keysizemin=128, keysizemax=256
000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
000 algorithm ESP auth attr: id=9, name=AUTH_ALGORITHM_AES_CBC, keysizemin=128, keysizemax=128
000
000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
000
000 stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
000
000 "block": 205.150.200.247[%myid]---205.150.200.241...%group; unrouted; eroute owner: #0
000 "block": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "block": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "block": policy: TUNNEL+PFS+GROUP+GROUTED+REJECT+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "block": dpd: action:hold; delay:30; timeout:180;
000 "block": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear": 205.150.200.247[%myid]---205.150.200.241...%group; unrouted; eroute owner: #0
000 "clear": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear": policy: TUNNEL+PFS+GROUP+GROUTED+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear": dpd: action:hold; delay:30; timeout:180;
000 "clear": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#128.63.2.53/32": 205.150.200.247[%myid]---205.150.200.241...%any===128.63.2.53/32; prospective erouted; eroute owner: #0
000 "clear#128.63.2.53/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#128.63.2.53/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#128.63.2.53/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#128.63.2.53/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#128.63.2.53/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#128.8.10.90/32": 205.150.200.247[%myid]---205.150.200.241...%any===128.8.10.90/32; prospective erouted; eroute owner: #0
000 "clear#128.8.10.90/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#128.8.10.90/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#128.8.10.90/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#128.8.10.90/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#128.8.10.90/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.112.36.4/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.112.36.4/32; prospective erouted; eroute owner: #0
000 "clear#192.112.36.4/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.112.36.4/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.112.36.4/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.112.36.4/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.112.36.4/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.203.230.10/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.203.230.10/32; prospective erouted; eroute owner: #0
000 "clear#192.203.230.10/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.203.230.10/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.203.230.10/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.203.230.10/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.203.230.10/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.228.79.201/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.228.79.201/32; prospective erouted; eroute owner: #0
000 "clear#192.228.79.201/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.228.79.201/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.228.79.201/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.228.79.201/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.228.79.201/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.33.4.12/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.33.4.12/32; prospective erouted; eroute owner: #0
000 "clear#192.33.4.12/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.33.4.12/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.33.4.12/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.33.4.12/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.33.4.12/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.36.148.17/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.36.148.17/32; prospective erouted; eroute owner: #0
000 "clear#192.36.148.17/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.36.148.17/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.36.148.17/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.36.148.17/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.36.148.17/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.5.5.241/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.5.5.241/32; prospective erouted; eroute owner: #0
000 "clear#192.5.5.241/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.5.5.241/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.5.5.241/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.5.5.241/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.5.5.241/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#192.58.128.30/32": 205.150.200.247[%myid]---205.150.200.241...%any===192.58.128.30/32; prospective erouted; eroute owner: #0
000 "clear#192.58.128.30/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#192.58.128.30/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#192.58.128.30/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#192.58.128.30/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#192.58.128.30/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#193.0.14.129/32": 205.150.200.247[%myid]---205.150.200.241...%any===193.0.14.129/32; prospective erouted; eroute owner: #0
000 "clear#193.0.14.129/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#193.0.14.129/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#193.0.14.129/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#193.0.14.129/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#193.0.14.129/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#198.32.64.12/32": 205.150.200.247[%myid]---205.150.200.241...%any===198.32.64.12/32; prospective erouted; eroute owner: #0
000 "clear#198.32.64.12/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#198.32.64.12/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#198.32.64.12/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#198.32.64.12/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#198.32.64.12/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#198.41.0.4/32": 205.150.200.247[%myid]---205.150.200.241...%any===198.41.0.4/32; prospective erouted; eroute owner: #0
000 "clear#198.41.0.4/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#198.41.0.4/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#198.41.0.4/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#198.41.0.4/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#198.41.0.4/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#202.12.27.33/32": 205.150.200.247[%myid]---205.150.200.241...%any===202.12.27.33/32; prospective erouted; eroute owner: #0
000 "clear#202.12.27.33/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#202.12.27.33/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#202.12.27.33/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#202.12.27.33/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#202.12.27.33/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#205.150.200.134/32": 205.150.200.247[%myid]---205.150.200.241...%any===205.150.200.134/32; prospective erouted; eroute owner: #0
000 "clear#205.150.200.134/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#205.150.200.134/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#205.150.200.134/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#205.150.200.134/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#205.150.200.134/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#205.150.200.177/32": 205.150.200.247[%myid]---205.150.200.241...%any===205.150.200.177/32; prospective erouted; eroute owner: #0
000 "clear#205.150.200.177/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#205.150.200.177/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#205.150.200.177/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#205.150.200.177/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#205.150.200.177/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#205.150.200.178/32": 205.150.200.247[%myid]---205.150.200.241...%any===205.150.200.178/32; prospective erouted; eroute owner: #0
000 "clear#205.150.200.178/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#205.150.200.178/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#205.150.200.178/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#205.150.200.178/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#205.150.200.178/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear#205.150.200.241/32": 205.150.200.247[%myid]---205.150.200.241...%any===205.150.200.241/32; prospective erouted; eroute owner: #0
000 "clear#205.150.200.241/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear#205.150.200.241/32": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "clear#205.150.200.241/32": policy: TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear#205.150.200.241/32": dpd: action:hold; delay:30; timeout:180;
000 "clear#205.150.200.241/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "clear-or-private": 205.150.200.247[%myid]---205.150.200.241...%opportunisticgroup; unrouted; eroute owner: #0
000 "clear-or-private": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "clear-or-private": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "clear-or-private": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+GROUP+GROUTED+PASS+failurePASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "clear-or-private": dpd: action:hold; delay:30; timeout:180;
000 "clear-or-private": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "let-my-dns-go": 205.150.200.247:17/%any---205.150.200.241...%any:17/53===0.0.0.0/0; prospective erouted; eroute owner: #0
000 "let-my-dns-go": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "let-my-dns-go": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "let-my-dns-go": policy: RSASIG+ENCRYPT+TUNNEL+PFS+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 0,32; interface: eth0;
000 "let-my-dns-go": dpd: action:hold; delay:30; timeout:180;
000 "let-my-dns-go": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--cassidy": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ottawa.on.ca.]...205.150.200.241---205.150.200.252[@cassidy.sandelman.ottawa.on.ca]; erouted; eroute owner: #1017
000 "marajade--cassidy": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--cassidy": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--cassidy": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 32,32; interface: eth0;
000 "marajade--cassidy": dpd: action:hold; delay:30; timeout:180;
000 "marajade--cassidy": newest ISAKMP SA: #0; newest IPsec SA: #1017;
000 "marajade--catfish-extrude": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ottawa.on.ca.]...205.150.200.241---205.150.200.252[@cassidy.sandelman.ottawa.on.ca]===205.150.200.251/32; unrouted; eroute owner: #0
000 "marajade--catfish-extrude": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--catfish-extrude": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--catfish-extrude": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 32,32; interface: eth0;
000 "marajade--catfish-extrude": dpd: action:hold; delay:30; timeout:180;
000 "marajade--catfish-extrude": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--cose": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...205.150.200.129---205.150.200.134===198.103.103.0/24; prospective erouted; eroute owner: #0
000 "marajade--cose": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--cose": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--cose": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD+rKOD; prio: 24,32; interface: eth0;
000 "marajade--cose": dpd: action:hold; delay:30; timeout:180;
000 "marajade--cose": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--extrude": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...205.150.200.129---205.150.200.134===205.150.200.160/28; unrouted; eroute owner: #0
000 "marajade--extrude": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--extrude": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--extrude": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD; prio: 28,32; interface: eth0;
000 "marajade--extrude": dpd: action:hold; delay:30; timeout:180;
000 "marajade--extrude": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--gimli": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca.]...205.150.200.241---205.150.200.246; unrouted; eroute owner: #0
000 "marajade--gimli": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--gimli": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--gimli": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD+rKOD; prio: 32,32; interface: eth0;
000 "marajade--gimli": dpd: action:hold; delay:30; timeout:180;
000 "marajade--gimli": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--ircan": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...198.103.103.129---198.103.103.166===192.168.172.16/28; prospective erouted; eroute owner: #0
000 "marajade--ircan": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--ircan": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--ircan": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD; prio: 28,32; interface: eth0;
000 "marajade--ircan": dpd: action:hold; delay:30; timeout:180;
000 "marajade--ircan": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--istari-extrude": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ottawa.on.ca.]...205.150.200.241---205.150.200.252[@cassidy.sandelman.ottawa.on.ca]===205.150.200.254/32; erouted; eroute owner: #1018
000 "marajade--istari-extrude": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--istari-extrude": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--istari-extrude": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 32,32; interface: eth0;
000 "marajade--istari-extrude": dpd: action:hold; delay:30; timeout:180;
000 "marajade--istari-extrude": newest ISAKMP SA: #0; newest IPsec SA: #1018;
000 "marajade--targa": 205.150.200.163/32===205.150.200.247[C=CA, ST=Ontario, L=Ottawa, O=Sandelman Software Works, OU=Debugging Department, CN=marajade.sandelman.ca., E=root@marajade.sandelman.ca.]...65.49.207.194[C=ca, ST=on, L=ottawa, O=L-3, OU=Targa Systems Div., CN=targasystems.com]===192.168.168.0/24; unrouted; eroute owner: #0
000 "marajade--targa": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--targa": CAs: 'C=CA, ST=Ontario, L=Ottawa, O=Sandelman Software Works Corporation, OU=Certificates R Us, CN=Michael Richardson, E=mcr@sandelman.ottawa.on.ca'...'%any'
000 "marajade--targa": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--targa": policy: RSASIG+ENCRYPT+TUNNEL+PFS; prio: 32,24; interface: eth0;
000 "marajade--targa": dpd: action:hold; delay:30; timeout:180;
000 "marajade--targa": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--tuna-extrude": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ottawa.on.ca.]...205.150.200.241---205.150.200.252[@cassidy.sandelman.ottawa.on.ca]===205.150.200.251/32; erouted; eroute owner: #1033
000 "marajade--tuna-extrude": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--tuna-extrude": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--tuna-extrude": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 32,32; interface: eth0;
000 "marajade--tuna-extrude": dpd: action:hold; delay:30; timeout:180;
000 "marajade--tuna-extrude": newest ISAKMP SA: #1062; newest IPsec SA: #1033;
000 "marajade--tuna-extrude": IKE algorithm newest: 3DES_CBC_192-MD5-MODP1536
000 "marajade--vault": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ottawa.on.ca.]...192.139.46.135===192.139.46.73/32; unrouted; eroute owner: #0
000 "marajade--vault": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--vault": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--vault": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD+rKOD; prio: 32,32; interface: eth0;
000 "marajade--vault": dpd: action:hold; delay:30; timeout:180;
000 "marajade--vault": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade--vpsn": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...216.191.140.38===209.112.44.0/24; unrouted; eroute owner: #0
000 "marajade--vpsn": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade--vpsn": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade--vpsn": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD; prio: 24,32; interface: eth0;
000 "marajade--vpsn": dpd: action:hold; delay:30; timeout:180;
000 "marajade--vpsn": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "marajade-ssw--hifn": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca.]...208.10.194.245===172.18.0.0/16; erouted; eroute owner: #1044
000 "marajade-ssw--hifn": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "marajade-ssw--hifn": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "marajade-ssw--hifn": policy: RSASIG+ENCRYPT+TUNNEL+PFS+lKOD; prio: 32,16; interface: eth0;
000 "marajade-ssw--hifn": dpd: action:hold; delay:30; timeout:180;
000 "marajade-ssw--hifn": newest ISAKMP SA: #1063; newest IPsec SA: #1044;
000 "marajade-ssw--hifn": IKE algorithm newest: 3DES_CBC_192-MD5-MODP1536
000 "packetdefault": 0.0.0.0/0===205.150.200.247[%myid]---205.150.200.241...%opportunistic; prospective erouted; eroute owner: #0
000 "packetdefault": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "packetdefault": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "packetdefault": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failurePASS+lKOD+rKOD; prio: 0,0; interface: eth0;
000 "packetdefault": dpd: action:hold; delay:30; timeout:180;
000 "packetdefault": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private": 205.150.200.247[%myid]---205.150.200.241...%opportunisticgroup; unrouted; eroute owner: #0
000 "private": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+GROUP+GROUTED+failureDROP+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private": dpd: action:hold; delay:30; timeout:180;
000 "private": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private#192.139.46.73/32": 205.150.200.247[%myid]---205.150.200.241...%opportunistic===192.139.46.73/32; prospective erouted; eroute owner: #0
000 "private#192.139.46.73/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private#192.139.46.73/32": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private#192.139.46.73/32": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failureDROP+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private#192.139.46.73/32": dpd: action:hold; delay:30; timeout:180;
000 "private#192.139.46.73/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private#205.150.200.165/32": 205.150.200.247[%myid]---205.150.200.241...%opportunistic===205.150.200.165/32; eroute eclipsed; eroute owner: #0
000 "private#205.150.200.165/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private#205.150.200.165/32": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private#205.150.200.165/32": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failureDROP+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private#205.150.200.165/32": dpd: action:hold; delay:30; timeout:180;
000 "private#205.150.200.165/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private#205.150.200.165/32"[6]: 205.150.200.247[%myid]---205.150.200.241...205.150.200.134===205.150.200.165/32; erouted; eroute owner: #1061
000 "private#205.150.200.165/32"[6]: srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private#205.150.200.165/32"[6]: ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private#205.150.200.165/32"[6]: policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failureDROP+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private#205.150.200.165/32"[6]: dpd: action:hold; delay:30; timeout:180;
000 "private#205.150.200.165/32"[6]: newest ISAKMP SA: #0; newest IPsec SA: #1061;
000 "private-or-clear": 205.150.200.247[%myid]---205.150.200.241...%opportunisticgroup; unrouted; eroute owner: #0
000 "private-or-clear": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private-or-clear": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private-or-clear": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+GROUP+GROUTED+failurePASS+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private-or-clear": dpd: action:hold; delay:30; timeout:180;
000 "private-or-clear": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private-or-clear#0.0.0.0/0": 205.150.200.247[%myid]---205.150.200.241...%opportunistic; prospective erouted; eroute owner: #0
000 "private-or-clear#0.0.0.0/0": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private-or-clear#0.0.0.0/0": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private-or-clear#0.0.0.0/0": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failurePASS+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private-or-clear#0.0.0.0/0": dpd: action:hold; delay:30; timeout:180;
000 "private-or-clear#0.0.0.0/0": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private-or-clear#193.110.157.68/32": 205.150.200.247[%myid]---205.150.200.241...%opportunistic===193.110.157.68/32; eroute eclipsed; eroute owner: #0
000 "private-or-clear#193.110.157.68/32": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private-or-clear#193.110.157.68/32": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private-or-clear#193.110.157.68/32": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failurePASS+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private-or-clear#193.110.157.68/32": dpd: action:hold; delay:30; timeout:180;
000 "private-or-clear#193.110.157.68/32": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private-or-clear#205.150.200.128/25": 205.150.200.247[%myid]---205.150.200.241...%opportunistic===205.150.200.128/25; prospective erouted; eroute owner: #0
000 "private-or-clear#205.150.200.128/25": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private-or-clear#205.150.200.128/25": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private-or-clear#205.150.200.128/25": policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failurePASS+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private-or-clear#205.150.200.128/25": dpd: action:hold; delay:30; timeout:180;
000 "private-or-clear#205.150.200.128/25": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "private-or-clear#205.150.200.128/25"[3]: 205.150.200.247[%myid]---205.150.200.241...205.150.200.134===205.150.200.162/32; unrouted; eroute owner: #0
000 "private-or-clear#205.150.200.128/25"[3]: srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "private-or-clear#205.150.200.128/25"[3]: ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "private-or-clear#205.150.200.128/25"[3]: policy: RSASIG+ENCRYPT+TUNNEL+PFS+DONTREKEY+OPPORTUNISTIC+failurePASS+lKOD+rKOD; prio: 32,0; interface: eth0;
000 "private-or-clear#205.150.200.128/25"[3]: dpd: action:hold; delay:30; timeout:180;
000 "private-or-clear#205.150.200.128/25"[3]: newest ISAKMP SA: #1064; newest IPsec SA: #0;
000 "private-or-clear#205.150.200.128/25"[3]: IKE algorithm newest: 3DES_CBC_192-MD5-MODP1536
000 "ramsayville--marajade": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...69.196.173.113[@homegate.tygerteam.com]===209.112.44.192/26; prospective erouted; eroute owner: #0
000 "ramsayville--marajade": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "ramsayville--marajade": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "ramsayville--marajade": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 26,32; interface: eth0;
000 "ramsayville--marajade": dpd: action:hold; delay:30; timeout:180;
000 "ramsayville--marajade": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "ramsayville-annex--marajade": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...69.196.173.113[@homegate.tygerteam.com]===192.168.88.0/24; erouted; eroute owner: #1054
000 "ramsayville-annex--marajade": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "ramsayville-annex--marajade": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "ramsayville-annex--marajade": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 24,32; interface: eth0;
000 "ramsayville-annex--marajade": dpd: action:hold; delay:30; timeout:180;
000 "ramsayville-annex--marajade": newest ISAKMP SA: #1060; newest IPsec SA: #1054;
000 "ramsayville-annex--marajade": IKE algorithm newest: 3DES_CBC_192-MD5-MODP1536
000 "ramsayville-priv--marajade": 205.150.200.163/32===205.150.200.247[@marajade.sandelman.ca]...69.196.173.113[@homegate.tygerteam.com]===192.168.15.0/24; prospective erouted; eroute owner: #0
000 "ramsayville-priv--marajade": srcip=205.150.200.163; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "ramsayville-priv--marajade": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "ramsayville-priv--marajade": policy: RSASIG+ENCRYPT+TUNNEL+PFS+UP+lKOD; prio: 24,32; interface: eth0;
000 "ramsayville-priv--marajade": dpd: action:hold; delay:30; timeout:180;
000 "ramsayville-priv--marajade": newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000 #1017: "marajade--cassidy":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 6818s; newest IPSEC; eroute owner
000 #1017: "marajade--cassidy" used 101s ago; esp.365e64e8@205.150.200.252 esp.dfdf2c35@205.150.200.247 tun.10a0@205.150.200.252 tun.109f@205.150.200.247
000 #1018: "marajade--istari-extrude":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 7348s; newest IPSEC; eroute owner
000 #1018: "marajade--istari-extrude" used 101s ago; esp.365e64ea@205.150.200.252 esp.dfdf2c36@205.150.200.247 tun.10a2@205.150.200.252 tun.10a1@205.150.200.247
000 #1033: "marajade--tuna-extrude":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 13794s; newest IPSEC; eroute owner
000 #1033: "marajade--tuna-extrude" used 101s ago; esp.365e64f0@205.150.200.252 esp.dfdf2c3a@205.150.200.247 tun.10aa@205.150.200.252 tun.10a9@205.150.200.247
000 #1062: "marajade--tuna-extrude":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 1327s; newest ISAKMP; lastdpd=2s(seq in:28306 out:0)
000 #1044: "marajade-ssw--hifn":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in 19132s; newest IPSEC; eroute owner
000 #1044: "marajade-ssw--hifn" used 7421s ago; esp.1ba7fb5f@208.10.194.245 esp.dfdf2c3d@205.150.200.247 tun.10b0@208.10.194.245 tun.10af@205.150.200.247
000 #1063: "marajade-ssw--hifn":500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in 2402s; newest ISAKMP; lastdpd=26s(seq in:12084 out:0)
000 #1061: "private#205.150.200.165/32"[6] ...205.150.200.134===205.150.200.165/32:500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 2041s; newest IPSEC; eroute owner
000 #1061: "private#205.150.200.165/32"[6] ...205.150.200.134===205.150.200.165/32 used 101s ago; esp.4b993104@205.150.200.134 esp.dfdf2c43@205.150.200.247 tun.10bc@205.150.200.134 tun.10bb@205.150.200.247
000 #1064: "private-or-clear#205.150.200.128/25"[3] ...205.150.200.134===205.150.200.162/32:500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 3400s; newest ISAKMP; lastdpd=59s(seq in:16026 out:0)
000 #1059: "private-or-clear#205.150.200.128/25"[3] ...205.150.200.134===205.150.200.162/32:500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 399s; lastdpd=229s(seq in:21057 out:0)
000 #1054: "ramsayville-annex--marajade":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 22572s; newest IPSEC; eroute owner
000 #1054: "ramsayville-annex--marajade" esp.e79037e5@69.196.173.113 esp.dfdf2c41@205.150.200.247 tun.10b8@69.196.173.113 tun.10b7@205.150.200.247
000 #1060: "ramsayville-annex--marajade":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 1123s; newest ISAKMP; lastdpd=4s(seq in:18612 out:0)
000
000 205.150.200.247/32:0 -0-> 147.28.0.62/32:0 => %pass 32,0 target's TXT record:
000 205.150.200.247/32:0 -0-> 192.139.46.42/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 42.46.139.192.in-addr.arpa. was not found (tried CNAMEs)
000 205.150.200.247/32:0 -0-> 208.10.194.245/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 245.194.10.208.in-addr.arpa. was not found
000 205.150.200.247/32:0 -0-> 130.113.54.214/32:0 => %pass 32,0 target's TXT record:
000 205.150.200.247/32:0 -0-> 192.139.46.139/32:0 => %pass 32,0 target's TXT record:
000 205.150.200.247/32:0 -0-> 205.150.200.129/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 129.200.150.205.in-addr.arpa. was not found
000 205.150.200.247/32:0 -0-> 192.168.168.2/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 2.168.168.192.in-addr.arpa. was not found
000 205.150.200.247/32:0 -0-> 69.31.8.124/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 124.8.31.69.in-addr.arpa. was not found
000 205.150.200.247/32:0 -0-> 216.239.37.125/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 125.37.239.216.in-addr.arpa. was not found (tried CNAMEs)
000 205.150.200.247/32:0 -0-> 86.59.21.34/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 34.21.59.86.in-addr.arpa. was not found
000 205.150.200.247/32:0 -0-> 140.211.166.3/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 3.166.211.140.in-addr.arpa. was not found (tried CNAMEs)
000 205.150.200.247/32:0 -0-> 208.245.212.98/32:0 => %pass 32,0 target's TXT record: RR of type TXT for 98.212.245.208.in-addr.arpa. was not found (tried CNAMEs)