BUG: something in verify is acting up

Hugh Daniel <[email protected]> Wed, 19 Feb 2003 17:35:24 -0800
Newsgroups gmane.network.freeswan.devel
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----

  Verify (like everything...) is important in that users should now be
using it to decide if things are 'working', if verify does not return
all "OK"s then something is amiss.

  So having this fail on a vanilla road warrior laptop is a BUG.

  Various output appended.

		||ugh Daniel
		Testing Fool
		[email protected]

  
  The failure:

ahost# ipsec verify
...
Two or more interfaces found, checking IP forwarding        [FAILED]
...


  What other networks:

ifconfig
ipsec0    Link encap:Ethernet  HWaddr 00:21:EB:4A:FE:25  
          inet addr:216.240.42.209  Mask:255.255.255.240
          UP RUNNING NOARP  MTU:16260  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16 errors:0 dropped:49 overruns:0 carrier:0
          collisions:0 
          RX bytes:0 (0.0 b)  TX bytes:2203 (2.1 Kb)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:153 errors:0 dropped:0 overruns:0 frame:0
          TX packets:153 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 
          RX bytes:177539 (173.3 Kb)  TX bytes:177539 (173.3 Kb)

wlan0     Link encap:Ethernet  HWaddr 00:21:EB:4A:FE:25  
          inet addr:216.240.42.209  Bcast:216.240.42.223  Mask:255.255.255.240
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1973 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3041 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 
          RX bytes:886984 (866.1 Kb)  TX bytes:128622 (125.6 Kb)


  Yea, it's even all off:

ahost# cat /etc/systctl.conf
# Disables packet forwarding
net.ipv4.ip_forward = 0
# Enables source route verification
net.ipv4.conf.default.rp_filter = 0
# Disables the magic-sysrq key
kernel.sysrq = 0

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPlQwzVZpdJR7FBQRAQEC1QQAn9Kl72i5FFwqND9eHmX7jYigASlCQoFb
QG/RJHCwwbmp70iEVLWAxJENR1r5fNymz1awfokRXLeSoScdqqSmt9MMFcHPeS6o
YdS1H2Kk/DoTzluTUwYOYELPLVS4/ISES7qjfNO/LxmNm2rOUhgHd6bx7JK6TZlV
24N8xZ0I9QY=
=sqk7
-----END PGP SIGNATURE-----