[strongSwan] Explicit module loading on charon

Martin Willi martin at strongswan.org
Mon Aug 9 17:15:53 CEST 2010


Hi Claude,

> [...] socket-default socket-raw
> It simply seems to ignore connection attempts.

Having two socket implementations is problematic and the daemon might
ignore the packet completely.

>         --enable-nat-transport \
>         --enable-cisco-quirks \

Are you using IKEv1, too? These are pluto specific options.

>         --enable-socket-raw

What's the reason for enabling the raw socket? Using the default is just
fine (socket-default if pluto disabled, socket-raw otherwise).

If you enforce socket-raw for some reasons, you should disable
socket-default.

Regards
Martin





More information about the Users mailing list