Messages in this thread | | | From | Richard Guy Briggs <> | Subject | tncfg+ifconfig adds a route under 2.2.x | Date | Mon, 23 Aug 1999 22:36:33 -0400 (EDT) |
| |
-----BEGIN PGP SIGNED MESSAGE-----
Has anyone else seen this behaviour? Alexey especially must know...
I am getting the following unexpected behaviour with FreeS/WAN IPSEC stopped (userspace keying daemon Pluto not running and interfaces unconfigured), but statically linked into the kernel:
Manually issuing the commands:
ipsec tncfg --attach --virtual ipsec0 --physical eth0 ifconfig ipsec0 <eth0addr> netmask <eth0netmask> broadcast <eth0broadcast>
will automatically add the route to <eth0subnet> via ipsec0 *in addition to* the existing route to <eth0subnet> via eth0. The first command is the FreeS/WAN IPSEC command to attach a virtual device to a physical device. Furthermore, I am not able to delete the extra route.
Eh? This does not happen under 2.0.xx series kernels. Why does it happen under 2.2.xx? This is not wanted, we want to add the routes ourselves to likely unrelated destinations.
How does the kernel routing table decide to which route to send the packet if there are two with the same net/mask specification? Metric?
...The more I beat my head on this stuff, the more it has to go in favour of the ipchains/netfilter model... <shaking head>
slainte mhath, RGB - -- The first Ottawa Linux Symposium was a huge success! <ottawalinuxsymposium.org> This SunRayce was a wet one! DroughtRelief_99? -- <www.sunrayce.com/sunrayce/> Richard Guy Briggs -- PGP key available Auto-Free Ottawa! Canada <http://www.conscoop.ottawa.on.ca/rgb/> </www.flora.org/afo/> Prevent Internet Wiretapping! -- FreeS/WAN:<www.xs4all.nl/~freeswan> Thanks for voting Green! -- <green.ca> Marillion:<www.marillion.co.uk>
-----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv
iQCVAwUBN8IFLd+sBuIhFagtAQG0jgP+NGKjoaEsWk18dx3PSyj+DynDuT7deQRv 21En6AQC2rsGsGxqiOM86ozhJssQ3SacCFMJ6j+HN+m1phPHuzQKBXeOFTiePg05 Z6noidIJxDjtSQvGDFG3bvndlKC0RXf9+FowLffMS+0o1sp1B8iH7hjXFSYsNgLJ 1mwMUla2UMY= =+lXs -----END PGP SIGNATURE-----
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |