~ubuntu-branches/ubuntu/hardy/openswan/hardy-updates

« back to all changes in this revision

Viewing changes to programs/_confread/ipsec.conf

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2005-01-27 16:10:11 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20050127161011-idgybmyz3vwhpfiq
Tags: 2.3.0-2
Urgency HIGH due to security issue and problems with build-deps in sarge.
* Fix the security issue. Please see
  http://www.idefense.com/application/poi/display?id=190&
      type=vulnerabilities&flashstatus=false
  for more details. Thanks to Martin Schulze for informing me about
  this issue.
  Closes: #292458: Openswan XAUTH/PAM Buffer Overflow Vulnerability
* Added a Build-Dependency to lynx.
  Closes: #291143: openswan: FTBFS: Missing build dependency.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
2
 
# RCSID $Id: ipsec.conf.in,v 1.12 2004/01/20 19:37:13 sam Exp $
3
 
 
4
 
# This file:  /usr/share/doc/freeswan/ipsec.conf-sample
5
 
#
6
 
# Manual:     ipsec.conf.5
7
 
#
8
 
# Help: 
9
 
# http://www.freeswan.org/freeswan_trees/freeswan-2.1.3/doc/quickstart.html
10
 
# http://www.freeswan.org/freeswan_trees/freeswan-2.1.3/doc/config.html
11
 
# http://www.freeswan.org/freeswan_trees/freeswan-2.1.3/doc/adv_config.html
12
 
#
13
 
# Policy groups are enabled by default. See:
14
 
# http://www.freeswan.org/freeswan_trees/freeswan-2.1.3/doc/policygroups.html
15
 
#
16
 
# Examples:
17
 
# http://www.freeswan.org/freeswan_trees/freeswan-2.1.3/doc/examples   
18
 
 
19
 
 
20
 
version 2.0     # conforms to second version of ipsec.conf specification
21
 
 
22
 
# basic configuration
23
 
config setup
24
 
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
25
 
        # klipsdebug=all
26
 
        # plutodebug=dns
27
 
 
28
 
 
29
 
# Add connections here.
30
 
 
31
 
# sample VPN connection
32
 
#sample#        conn sample
33
 
#sample#                # Left security gateway, subnet behind it, next hop toward right.
34
 
#sample#                left=10.0.0.1
35
 
#sample#                leftsubnet=172.16.0.0/24
36
 
#sample#                leftnexthop=10.22.33.44
37
 
#sample#                # Right security gateway, subnet behind it, next hop toward left.
38
 
#sample#                right=10.12.12.1
39
 
#sample#                rightsubnet=192.168.0.0/24
40
 
#sample#                rightnexthop=10.101.102.103
41
 
#sample#                # To authorize this connection, but not actually start it, at startup,
42
 
#sample#                # uncomment this.
43
 
#sample#                #auto=start
44
 
 
45
 
#Disable Opportunistic Encryption
46
 
include /etc/ipsec.d/examples/no_oe.conf