[strongSwan-dev] 5.6.2 regression? dns attributes are lost

Harald Dunkel harald.dunkel at aixigo.de
Wed Feb 21 09:23:47 CET 2018

Hi folks,

using the new strongswan 5.6.2 (on Stretch) together with the
old network-manager-strongswan 1.4.2 the nameserver entries
in /etc/resolv.conf are broken. They contain some fantasy IP
addresses, AFAICS. The domain search list is OK.

On the peer I am using Strongswan 5.6.1, esp. the attr plugin:

attr {
     # <attr> is an attribute name or an integer, values can be an IP address,
     # subnet or arbitrary value.
     # <attr> =
     dns =
     dns1 =
     dns2 =
     nbns =
     28674 = ac.example.de vs.example.de ws.example.de example.de
     28675 = ac.example.de vs.example.de ws.example.de example.de

     # Whether to load the plugin. Can also be an integer to increase the
     # priority of this plugin.
     load = yes

Do I have to upgrade n-m-s to version 1.4.3 for Strongswan 5.6.2?


More information about the Dev mailing list