[vpn-help] vpn-help Digest, Vol 61, Issue 23

Fri Oct 28 13:20:56 CDT 2011

Hi,

it is a reported bug

https://bugs.launchpad.net/ubuntu/+source/ike/+bug/860208

Best regards,

Felix

2011/10/28 <vpn-help-request at lists.shrew.net>

> Send vpn-help mailing list submissions to
>        vpn-help at lists.shrew.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://lists.shrew.net/mailman/listinfo/vpn-help
> or, via email, send a message with subject or body 'help' to
>        vpn-help-request at lists.shrew.net
>
> You can reach the person managing the list at
>        vpn-help-owner at lists.shrew.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of vpn-help digest..."
>
>
> Today's Topics:
>
>   1. Problem after upgrade to ubuntu 11.10 (Joao Mendes)
>   2. Re: Problem after upgrade to ubuntu 11.10 (Tilo Chucholowius)
>   3. Re: Shrew 2.2.0 OS X build working on OSX 10.7 Lion?
>      (Jaren Angerbauer)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 27 Oct 2011 22:24:25 +0100
> From: Joao Mendes <badseed.pt at gmail.com>
> Subject: [vpn-help] Problem after upgrade to ubuntu 11.10
> To: vpn-help at lists.shrew.net
> Message-ID:
>        <CALpcLwRedWGamRJYLWe-4e9h8ghnhuemyQEw3AcNwH97H_DcKg at mail.gmail.com
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi,
> I'musing 2.1.7and after upgraded the ubuntu to 11.10, shrew stoped working.
> I noticed that in iked.log only the requests are beeing loged, but if I
> look
> at "wireshark" in premiscous mode I see all requests and responses from the
> server.
> It doesn't pass phase 1.
>
> Can anyone help
>
> Thanks,
> Jo?o Mendes
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.shrew.net/pipermail/vpn-help/attachments/20111027/86ac7f45/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 2
> Date: Thu, 27 Oct 2011 23:49:32 +0200
> From: Tilo Chucholowius <tc at tc-world.de>
> Subject: Re: [vpn-help] Problem after upgrade to ubuntu 11.10
> To: vpn-help at lists.shrew.net
> Message-ID: <4EA9D1EC.2030503 at tc-world.de>
> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"
>
> Hi Jo?o,
>
> same here.
> Kevin advices to download and compile the new version 2.2.0 beta. I
> don't have had the time to do it.
> It's worth a try.
> I've quoted Kevin's answer below.
>
> cu
> Tilo
>
>
> On 10/26/2011 09:01 AM, tc at tc-world.de wrote:
> > again with the ike.log attachment.
> >
> >> Hi Shrew VPN list,
> >>
> >> I need your help with the VPN connect to a Netgear Firewall.
> >>
> >> VPN Client Version:
> >> 2.1.7-release (Shrew VPN Client)
> >>
> >> Linux or BSD OS Version:
> >> Kubuntu 11.10 64bit (actual patched enabled)
> >>
> >> Gateway Make/Model:
> >> Netgear FVS338,
> >>
> >> Gateway OS Version: ( if known)
> >> Firmware 3.0.7-24 (newest available firmware)
> >>
> >> I have set the rp_filter to 0
> >> sysctl.d/10-network-security.conf:net.ipv4.conf.default.rp_filter=0
> >> sysctl.d/10-network-security.conf:net.ipv4.conf.all.rp_filter=0
> >> like advised in:
> >> http://lists.shrew.net/pipermail/vpn-help/2008-November/000950.html
> >>
> >> After that I have made the config settings again on my WindowsXP system
> >> and the VPN connection were established and works.
> >> Then I exported the ACSII config and import it to my Linux machine (same
> >> like WinXP, dualboot) in Shrew VPN client with same problem. (stuck at
> >> Phase 1 negotiation)
> >> I have also debuged the packets where I see requests but no answer from
> >> VPN gateway (Netgear).
> >>
>
> Hi Tilo,
>
> We think there may be a problem with the Shrew 2.1.7 packages available
> in 11.10.  This thread has more detail:
> http://lists.shrew.net/pipermail/vpn-help/2011-September/003988.html
> http://lists.shrew.net/pipermail/vpn-help/2011-October/004033.html
> http://lists.shrew.net/pipermail/vpn-help/2011-October/004049.html
>
> This post contains instructions on how to install the Shrew 2.1.5
> packages (which do work) in 11.10.
> http://lists.shrew.net/pipermail/vpn-help/2011-October/004053.html
>
> You can also try compiling the Shrew 2.2.0 beta yourself, it works also.
> http://lists.shrew.net/pipermail/vpn-help/2011-October/004056.html
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>
>
> Am 27.10.2011 23:24, schrieb Joao Mendes:
> >
> > Hi,
> > I'musing 2.1.7and after upgraded the ubuntu to 11.10, shrew stoped
> > working.
> > I noticed that in iked.log only the requests are beeing loged, but if
> > I look at "wireshark" in premiscous mode I see all requests and
> > responses from the server.
> > It doesn't pass phase 1.
> >
> > Can anyone help
> >
> > Thanks,
> > Jo?o Mendes
> >
>
>
> >
> >
> > _______________________________________________
> > vpn-help mailing list
> > vpn-help at lists.shrew.net
> > http://lists.shrew.net/mailman/listinfo/vpn-help
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.shrew.net/pipermail/vpn-help/attachments/20111027/228b665a/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 3
> Date: Thu, 27 Oct 2011 23:29:02 -0600
> From: Jaren Angerbauer <jarenangerbauer at gmail.com>
> Subject: Re: [vpn-help] Shrew 2.2.0 OS X build working on OSX 10.7
>        Lion?
> To: Kevin VPN <kvpn at live.com>, vpn-help at lists.shrew.net
> Message-ID:
>        <CAGkwwuOhTg3cTrLoyeuc7O31h9JpMBXzcdxOi2JWzKAdgQBC0Q at mail.gmail.com
> >
> Content-Type: text/plain; charset=ISO-8859-1
>
> On Wed, Oct 26, 2011 at 8:23 PM, Kevin VPN <kvpn at live.com> wrote:
> > Hi Jaren,
> >
> > I don't have much experience with Shrew on OS X, but I have found that it
> > can conflict with some other VPN software. ?Shrew on OSX install itself
> so
> > that one of the ike processes loads at startup, and that process binds to
> > ports 500 and 4500. ?This prevents other VPN software (for example IP
> > Securitas) from initiating a VPN connection.
> >
> > If you kill the ike process (I can't remember if it's ikec or iked), then
> > other VPN clients should be able to work. ?Afaik the client software can
> > co-exist without issue, just you can only run one at a time.
>
> Hi Kevin,
>
> Thanks for your follow up on this.  I actually went ahead an went
> through the steps and installed the Mac OS X client (I am running
> 10.7.2 - Lion) and it works perfectly!  Additionally I can still run
> other VPN (I've tried two different OpenVPN clients) services, and
> they still work as well -- even with the iked process running.
>
> AFAIK, I don't have any non-standard system configurations, so this
> should work on Lion without problems.
>
> Thanks!
>
> --Jaren
>
>
> ------------------------------
>
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>
>
> End of vpn-help Digest, Vol 61, Issue 23
> ****************************************
>

-- 
*Félix Pablo Grande Ramos*

*Carpe diem quam minimum credula postero
*Aprovecha el día, no confíes en mañana

*Horacio (Odas,I,11)
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20111028/8b239b61/attachment.html>