lkml.org 
[lkml]   [1999]   [Aug]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subjecttncfg+ifconfig adds a route under 2.2.x
Date
-----BEGIN PGP SIGNED MESSAGE-----

Has anyone else seen this behaviour? Alexey especially must know...

I am getting the following unexpected behaviour with FreeS/WAN IPSEC
stopped (userspace keying daemon Pluto not running and interfaces
unconfigured), but statically linked into the kernel:

Manually issuing the commands:

ipsec tncfg --attach --virtual ipsec0 --physical eth0
ifconfig ipsec0 <eth0addr> netmask <eth0netmask> broadcast <eth0broadcast>

will automatically add the route to <eth0subnet> via ipsec0 *in
addition to* the existing route to <eth0subnet> via eth0. The first
command is the FreeS/WAN IPSEC command to attach a virtual device to a
physical device. Furthermore, I am not able to delete the extra
route.

Eh? This does not happen under 2.0.xx series kernels. Why does it
happen under 2.2.xx? This is not wanted, we want to add the routes
ourselves to likely unrelated destinations.

How does the kernel routing table decide to which route to send the
packet if there are two with the same net/mask specification? Metric?

...The more I beat my head on this stuff, the more it has
to go in favour of the ipchains/netfilter model... <shaking head>

slainte mhath, RGB
- --
The first Ottawa Linux Symposium was a huge success! <ottawalinuxsymposium.org>
This SunRayce was a wet one! DroughtRelief_99? -- <www.sunrayce.com/sunrayce/>
Richard Guy Briggs -- PGP key available Auto-Free Ottawa! Canada
<http://www.conscoop.ottawa.on.ca/rgb/> </www.flora.org/afo/>
Prevent Internet Wiretapping! -- FreeS/WAN:<www.xs4all.nl/~freeswan>
Thanks for voting Green! -- <green.ca> Marillion:<www.marillion.co.uk>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBN8IFLd+sBuIhFagtAQG0jgP+NGKjoaEsWk18dx3PSyj+DynDuT7deQRv
21En6AQC2rsGsGxqiOM86ozhJssQ3SacCFMJ6j+HN+m1phPHuzQKBXeOFTiePg05
Z6noidIJxDjtSQvGDFG3bvndlKC0RXf9+FowLffMS+0o1sp1B8iH7hjXFSYsNgLJ
1mwMUla2UMY=
=+lXs
-----END PGP SIGNATURE-----

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:2.180 / U:0.472 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site