~ubuntu-branches/ubuntu/hardy/openswan/hardy-updates

« back to all changes in this revision

Viewing changes to testing/pluto/nat-pluto-03/road.conf

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2005-01-27 16:10:11 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20050127161011-idgybmyz3vwhpfiq
Tags: 2.3.0-2
Urgency HIGH due to security issue and problems with build-deps in sarge.
* Fix the security issue. Please see
  http://www.idefense.com/application/poi/display?id=190&
      type=vulnerabilities&flashstatus=false
  for more details. Thanks to Martin Schulze for informing me about
  this issue.
  Closes: #292458: Openswan XAUTH/PAM Buffer Overflow Vulnerability
* Added a Build-Dependency to lynx.
  Closes: #291143: openswan: FTBFS: Missing build dependency.

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
# /etc/ipsec.conf - Openswan IPsec configuration file
 
2
 
 
3
version 2.0
 
4
 
 
5
config setup
 
6
        # put the logs in /tmp for the UMLs, so that we can operate
 
7
        # without syslogd, which seems to break on UMLs
 
8
        plutostderrlog=/tmp/pluto.log
 
9
        plutorestartoncrash=false
 
10
        #plutodebug=""
 
11
        #plutoopts="--noretransmits"
 
12
        dumpdir=/var/tmp
 
13
        nat_traversal=no
 
14
 
 
15
conn road-eastnet-forceencaps
 
16
        also=eastnet
 
17
        also=road-east
 
18
        auto=add
 
19
        left=192.1.3.194
 
20
        forceencaps=yes
 
21
 
 
22
conn packetdefault
 
23
        auto=ignore
 
24
 
 
25
conn road-east
 
26
        right=192.1.2.23
 
27
        rightid=@east
 
28
        rightrsasigkey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL
 
29
        rightnexthop=192.1.2.45
 
30
        leftid=@road.uml.freeswan.org
 
31
        leftrsasigkey=0sAQNxbOBmDqiNrUmn5q4kzBQ6I6pW/g2c8iDh3Y/KDtELBC6G0dASaaa95lV0cZT2kla681hVLzRF4MUCmFkH5ih514Nrwc5aptte49/70WotqcbvAhXeBX0zbg78gUPaT7CcUEAYxHoqHubao4mmfWlSrOnpf4crE/q3J6zH+8Z3bfsTGnpThgfNCItHpH7jkHPUYDilHsk0Zfd5fxjVDbl8JbQoT3P1KrdmpK7M1sXQhug12ocq8HlrXa3smJIq5b4T0rF+MYrThrNytNIEn53phuj6S8qmONin4usCqpUw50i2VqaBNQSY++/B57AqThFZNqt7TjqqT0CQ7tPRELgXwRvWA04GDhqBHHWoOrLdsR0p
 
32
        leftnexthop=192.1.3.254
 
33
 
 
34
include /etc/ipsec.d/ipsec.conf.common
 
35
 
 
36
conn us
 
37
        rightsubnet=192.0.2.0/24
 
38
 
 
39
conn them
 
40
        leftsubnet=192.0.1.0/24
 
41
 
 
42
 
 
43