здравствуйте.
пока поставил пакет openswan, настроил вроде, после запуска пишет вот это:
linux-6vhu:~ # ipsec setup start
redirecting to systemctl start
ipsec_setup: Starting Openswan IPsec 2.6.38...
ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
ipsec_setup: NETKEY support found. Use protostack=netkey in / etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY
является ли это нормальной работой или что за ошибка это netkey?
спасибо.
linux-6vhu:~ # ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.38/K(no kernel code presently loaded) Checking for IPsec support in kernel [FAILED]
SAref kernel support [N/A]
Checking that pluto is running [FAILED]
whack: Pluto is not running (no «/var/run/pluto/pluto.ctl») Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
linux-6vhu:~ # ipsec version
Linux Openswan U2.6.38/K(no kernel code presently loaded)
See `ipsec --copyright' for copyright information.
после выполнения
linux-6vhu:~ # modprobe af_key
linux-6vhu:~ # ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.38/K3.7.10-1.1-desktop (netkey) Checking for IPsec support in kernel [OK]
SAref kernel support [N/A]
NETKEY: Testing XFRM related proc values [OK]
[FAILED]
Please disable /proc/sys/net/ipv4/conf/*/accept_redirects or NETKEY will accept bogus ICMP redirects! [OK]
Checking that pluto is running [FAILED]
whack: Pluto is not running (no «/var/run/pluto/pluto.ctl») Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
can not load config '/etc/ipsec.conf': /etc/ipsec.conf:36: syntax error, unexpected INCLUDE [include]
как отменить эту команду? и убрать ошибки?
ps чтото не понял как работать на форуме много пробелов ставит или вообще не ставит