<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Jan 10, 2019 at 12:27 PM <<a href="mailto:swan-request@lists.libreswan.org">swan-request@lists.libreswan.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send Swan mailing list submissions to<br>
<a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.libreswan.org/mailman/listinfo/swan" rel="noreferrer" target="_blank">https://lists.libreswan.org/mailman/listinfo/swan</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:swan-request@lists.libreswan.org" target="_blank">swan-request@lists.libreswan.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:swan-owner@lists.libreswan.org" target="_blank">swan-owner@lists.libreswan.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Swan digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Dropping AUTH message containing INITIAL_CONTACT on OSX<br>
and Win10 (Derek Cameron)<br>
2. Help!! (Antonios Katsouros)<br>
3. Re: Help!! (Nick Howitt)<br>
4. Re: Help!! (Bruno de Paula Larini)<br>
5. Re: Dropping AUTH message containing INITIAL_CONTACT on OSX<br>
and Win10 (Paul Wouters)<br>
6. Re: Help!! (Antonios Katsouros)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Wed, 9 Jan 2019 07:47:43 -0800<br>
From: Derek Cameron <<a href="mailto:dcamero2016@gmail.com" target="_blank">dcamero2016@gmail.com</a>><br>
To: Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>><br>
Cc: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: Re: [Swan] Dropping AUTH message containing INITIAL_CONTACT<br>
on OSX and Win10<br>
Message-ID:<br>
<CAEW6Rjf5GfK2t=<a href="mailto:YbXuPN0tTatHkuVgzTXn-mchFqZtHffC-T0A@mail.gmail.com" target="_blank">YbXuPN0tTatHkuVgzTXn-mchFqZtHffC-T0A@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
Thanks for your help. You're welcome to copy and paste anything you<br>
like from my blog post<br>
<a href="https://dc77312.wordpress.com/2019/01/09/libreswan-ipsec-ikev2-vpn-on-rhel-8-beta-server-and-windows-10-client/" rel="noreferrer" target="_blank">https://dc77312.wordpress.com/2019/01/09/libreswan-ipsec-ikev2-vpn-on-rhel-8-beta-server-and-windows-10-client/</a><br>
<br>
On Tue, Jan 8, 2019 at 8:08 AM Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>> wrote:<br>
><br>
> Right. that changes the setting from EAP-TLS to Machine Certificate. I<br>
> will add this to the FAQ section. Thanks!<br>
><br>
> Under properties and TCP I believe there is an option for "send all<br>
> traffic via VPN"<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 9 Jan 2019 19:56:27 +0300<br>
From: Antonios Katsouros <<a href="mailto:akatsourossony@gmail.com" target="_blank">akatsourossony@gmail.com</a>><br>
To: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: [Swan] Help!!<br>
Message-ID:<br>
<CAPOZpEowY+8uzxpFL-=bujNqDhnM86E_4FNVX=kN1O0S=<a href="mailto:hLPEA@mail.gmail.com" target="_blank">hLPEA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Dear all!!<br>
<br>
newbie in list with a serious problem...<br>
<br>
I installed Libreswan through a vpn script ( this one :<br>
<a href="https://github.com/hwdsl2/s." rel="noreferrer" target="_blank">https://github.com/hwdsl2/s.</a>.. !.. Please I need your help... When the vpn<br>
is establised, I need to add a route on the server (manually currently) in<br>
order to access the network inside.<br>
<br>
My connection seems not that stable so every time the vpn falls and<br>
reconnects, the route is lost from the server. So I have to go again to<br>
server and add the route ( route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> gw 10.50.20.2 ).<br>
Is there a way I can do this automatically??? So when the VPN is down and<br>
reconnects, after reconnection, the server runs automatically this route on<br>
its self ( route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> gw 10.50.20.2 ) .<br>
<br>
10.50.20.1 is the server, 10.50.20.2 is the other side (client) which also<br>
is on the rest network behind.<br>
<br>
Please can somebody help???<br>
<br>
Hundreds of thanks in advance<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.libreswan.org/pipermail/swan/attachments/20190109/45d4e009/attachment-0001.html" rel="noreferrer" target="_blank">https://lists.libreswan.org/pipermail/swan/attachments/20190109/45d4e009/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 9 Jan 2019 17:00:34 +0000<br>
From: Nick Howitt <<a href="mailto:nick@howitts.co.uk" target="_blank">nick@howitts.co.uk</a>><br>
To: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: Re: [Swan] Help!!<br>
Message-ID: <<a href="mailto:491d0268-c544-e101-cd6d-f2793b929f9e@howitts.co.uk" target="_blank">491d0268-c544-e101-cd6d-f2793b929f9e@howitts.co.uk</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.libreswan.org/pipermail/swan/attachments/20190109/6e8627bf/attachment-0001.html" rel="noreferrer" target="_blank">https://lists.libreswan.org/pipermail/swan/attachments/20190109/6e8627bf/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 9 Jan 2019 15:14:54 -0200<br>
From: Bruno de Paula Larini <<a href="mailto:bruno.larini@riosoft.com.br" target="_blank">bruno.larini@riosoft.com.br</a>><br>
To: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: Re: [Swan] Help!!<br>
Message-ID: <<a href="mailto:48fa261d-deaa-37fe-cac1-7465062bcf3a@riosoft.com.br" target="_blank">48fa261d-deaa-37fe-cac1-7465062bcf3a@riosoft.com.br</a>><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
Em 09/01/2019 14:56, Antonios Katsouros escreveu:<br>
> My connection seems not that stable so every time the vpn falls and <br>
> reconnects, the route is lost from the server. So I have to go again <br>
> to server and add the route ( route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> <br>
> <<a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">http://192.168.61.0/24</a>> gw 10.50.20.2 ). Is there a way I can do this <br>
> automatically??? So when the VPN is down and reconnects, after <br>
> reconnection, the server runs automatically this route on its self ( <br>
> route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> <<a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">http://192.168.61.0/24</a>> gw 10.50.20.2 ) .<br>
><br>
> 10.50.20.1 is the server, 10.50.20.2 is the other side (client) which <br>
> also is on the rest network behind.<br>
><br>
I had a similar issue some months ago. You can add the "leftsourceip" <br>
parameter to the config so the server will know the way to the other <br>
side of the tunnel. Example: leftsourceip=10.50.20.1<br>
Then you can stop adding the route manually.<br>
<br>
-Bruno<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.libreswan.org/pipermail/swan/attachments/20190109/895ee884/attachment-0001.html" rel="noreferrer" target="_blank">https://lists.libreswan.org/pipermail/swan/attachments/20190109/895ee884/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 9 Jan 2019 13:07:09 -0500 (EST)<br>
From: Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>><br>
To: Derek Cameron <<a href="mailto:dcamero2016@gmail.com" target="_blank">dcamero2016@gmail.com</a>><br>
Cc: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: Re: [Swan] Dropping AUTH message containing INITIAL_CONTACT<br>
on OSX and Win10<br>
Message-ID: <<a href="mailto:alpine.LRH.2.21.1901091303160.6009@bofh.nohats.ca" target="_blank">alpine.LRH.2.21.1901091303160.6009@bofh.nohats.ca</a>><br>
Content-Type: text/plain; charset=US-ASCII; format=flowed<br>
<br>
On Wed, 9 Jan 2019, Derek Cameron wrote:<br>
<br>
> <br>
> Thanks for your help. You're welcome to copy and paste anything you<br>
> like from my blog post<br>
> <a href="https://dc77312.wordpress.com/2019/01/09/libreswan-ipsec-ikev2-vpn-on-rhel-8-beta-server-and-windows-10-client/" rel="noreferrer" target="_blank">https://dc77312.wordpress.com/2019/01/09/libreswan-ipsec-ikev2-vpn-on-rhel-8-beta-server-and-windows-10-client/</a><br>
<br>
Thanks, I'll see about merging it onto the libreswan wiki. Thanks for<br>
the permission!<br>
<br>
Some notes:<br>
<br>
- Please use "libreswan" or "Libreswan", not "LibreSwan" :)<br>
- Does it survive rekeying? You might want/need to add<br>
msdh-downgrade=yes to allow rekeying without or with wrong/bad<br>
DH group 1024 (perhaps the latest Windows build fixed this?)<br>
- I think you can fixup the authentication without using powershell,<br>
but I would have to reclick through a windows box again to remember<br>
how I did that.<br>
<br>
Paul<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Thu, 10 Jan 2019 12:27:13 +0300<br>
From: Antonios Katsouros <<a href="mailto:akatsourossony@gmail.com" target="_blank">akatsourossony@gmail.com</a>><br>
To: <a href="mailto:swan@lists.libreswan.org" target="_blank">swan@lists.libreswan.org</a><br>
Subject: Re: [Swan] Help!!<br>
Message-ID:<br>
<<a href="mailto:CAPOZpEphAsE9kwA7N2McUGoOK77JpMzGsKX9Nuz%2BDmYLsgQ1Qg@mail.gmail.com" target="_blank">CAPOZpEphAsE9kwA7N2McUGoOK77JpMzGsKX9Nuz+DmYLsgQ1Qg@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Dear All,<br>
<br>
can please somebody help???? Please... your help is higlhy appreciated.<br>
<br>
many thanks<br>
<br>
On Wed, Jan 9, 2019 at 7:56 PM Antonios Katsouros <<a href="mailto:akatsourossony@gmail.com" target="_blank">akatsourossony@gmail.com</a>><br>
wrote:<br>
<br>
> Dear all!!<br>
><br>
> newbie in list with a serious problem...<br>
><br>
> I installed Libreswan through a vpn script ( this one :<br>
> <a href="https://github.com/hwdsl2/s." rel="noreferrer" target="_blank">https://github.com/hwdsl2/s.</a>.. !.. Please I need your help... When the<br>
> vpn is establised, I need to add a route on the server (manually currently)<br>
> in order to access the network inside.<br>
><br>
> My connection seems not that stable so every time the vpn falls and<br>
> reconnects, the route is lost from the server. So I have to go again to<br>
> server and add the route ( route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> gw 10.50.20.2<br>
> ). Is there a way I can do this automatically??? So when the VPN is down<br>
> and reconnects, after reconnection, the server runs automatically this<br>
> route on its self ( route add -net <a href="http://192.168.61.0/24" rel="noreferrer" target="_blank">192.168.61.0/24</a> gw 10.50.20.2 ) .<br>
><br>
> 10.50.20.1 is the server, 10.50.20.2 is the other side (client) which also<br>
> is on the rest network behind.<br>
><br>
> Please can somebody help???<br>
><br>
> Hundreds of thanks in advance<br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.libreswan.org/pipermail/swan/attachments/20190110/9c04eb8d/attachment.html" rel="noreferrer" target="_blank">https://lists.libreswan.org/pipermail/swan/attachments/20190110/9c04eb8d/attachment.html</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Swan mailing list<br>
<a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a><br>
<a href="https://lists.libreswan.org/mailman/listinfo/swan" rel="noreferrer" target="_blank">https://lists.libreswan.org/mailman/listinfo/swan</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Swan Digest, Vol 73, Issue 3<br>
***********************************<br>
</blockquote></div></div>