<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-CA link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Hi all. I recently have been rebuilding a new Centos server to replace an<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>existing one. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>I use this server as a backup device and then push my backups to a<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>remote spot via the IPSec VPN tunnel.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>It has been working. However, my newly built box using the same<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>configuration file will not connect.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>My IPSec verify is below.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>-------<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Verifying installed system and configuration files<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Version check and ipsec on-path [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Libreswan 3.7 (netkey) on 3.12.7-200.fc19.x86_64<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking for IPsec support in kernel [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>NETKEY: Testing XFRM related proc values<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> ICMP default/send_redirects [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> ICMP default/accept_redirects [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'> XFRM larval drop [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Pluto ipsec.conf syntax [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Hardware random device [N/A]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Two or more interfaces found, checking IP forwarding [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking rp_filter [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking that pluto is running [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Pluto listening for IKE on udp 500 [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Pluto listening for IKE/NAT-T on udp 4500 [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Pluto ipsec.secret syntax [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking NAT and MASQUERADEing [TEST INCOMPLETE]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking 'ip' command [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking 'iptables' command [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking 'prelink' command does not interfere with FIPS [PRESENT]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Checking for obsolete ipsec.conf options [OK]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Opportunistic Encryption [DISABLED]<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>--------<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Also, in the secure and messages files I can see that Phase 1 completes,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>but it seems to get stuck on EVENT_PENDING_DDNS. It does queue up<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>EVENT_PENDING_PHASE2 but never gets by the DDNS.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Any suggestions are greatl appreciated.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | * processed 0 messages from<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>cryptographic helpers<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>in 59 seconds<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>in 59 seconds<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: |<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | *received whack message<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: initiating all conns with<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>alias='aliantVPN'<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | * processed 0 messages from<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>cryptographic helpers<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>in 59 seconds<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | next event EVENT_PENDING_DDNS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>in 59 seconds<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Feb 19 09:45:31 localhost pluto[8835]: | reaped addconn helper child<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div><P align=left><FONT size=2><FONT size=2><FONT face=Tahoma><FONT color=#800000><STRONG>------------------</STRONG></FONT></FONT></FONT></FONT></P>
<P align=left><FONT size=2><FONT face=Tahoma><FONT color=#800000><STRONG><U>Nurses Association of New Brunswick<BR></U></STRONG></FONT></FONT></FONT><FONT size=2><FONT face=Tahoma><FONT color=#800000><STRONG><U>Association des infirmières et infirmiers du Nouveau-Brunswick</U></STRONG></FONT></FONT></FONT></P>
<P align=left><STRONG><FONT face=Tahoma color=#800000 size=1>165 Regent Street / 165, rue Regent<BR>Fredericton, N.B. / Fredericton, N.-B.<BR>E3B 7B4<BR>Tel. /. Tél.: 506-458-8731<BR></FONT></STRONG><FONT face=Tahoma color=#800000 size=1><A href="http://www.nanb.nb.ca">www.nanb.nb.ca</A> / <A href="http://www.aiinb.nb.ca"><STRONG>www.aiinb.nb.ca</STRONG></A></FONT></P>
<P align=left><FONT face=Tahoma size=1>This email message (including any attachments, if any) is confidential and may be privileged. Any unauthorized distribution or disclosure is prohibited. If you have received this e-mail in error, please notify us and delete it and any attachments from your computer systems and records.<BR></FONT><FONT face=Tahoma size=1><BR>Ce courriel (y compris les pièces jointes) est confidentiel et peut être protégé. La distribution ou la divulgation non autorisée de ce courriel est interdite. Si vous avez reçu ce courriel par erreur, veuillez nous en aviser et supprimer ce courriel, ainsi que les pièces jointes, de votre système informatique et de vos dossiers.<BR></P></FONT><FONT size=2><FONT size=2><FONT face=Tahoma color=#800000 size=1><STRONG></STRONG></FONT></FONT></FONT>
<P align=left><FONT size=2><FONT size=2><FONT face=Tahoma color=#800000 size=1><STRONG>19/2/2014</STRONG></FONT></FONT></FONT></P>
<P align=left><FONT size=2><FONT color=#0000ff><FONT size=2><FONT color=#0000ff><FONT face=Tahoma><FONT size=2><FONT size=2><FONT face=Tahoma><FONT color=#800000><STRONG>------------------</STRONG></FONT></FONT></FONT></FONT></P><FONT face=Calibri color=#007f00 size=2><EM><FONT color=#007f00 size=2></FONT></EM></FONT></FONT></FONT></FONT></FONT></FONT><A title="gfidisc.nanb.nb.ca" href="#"> </A></body></html>