Не сбить нас с верного пути, нам по фигу куда идти
https://forum.lissyara.su/
Код: Выделить всё
--------------------------
|Index: netinet6/ah_input.c
|===================================================================
|RCS file: /home/ncvs/src/sys/netinet6/ah_input.c,v
|retrieving revision 1.20
|diff -b -u -p -r1.20 ah_input.c
|--- netinet6/ah_input.c 7 Jan 2005 02:30:34 -0000 1.20
|+++ netinet6/ah_input.c 31 May 2007 13:08:50 -0000
--------------------------
File to patch:Код: Выделить всё
[root@backup-bsd /usr/src/sys]# uname -a
FreeBSD backup-bsd.hq.telesens.lan 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Wed Feb 4 12:18:56 UTC 2009 root@backup-bsd.hq.telesens.lan:/usr/obj/usr/src/sys/i386.v1 i386посмотрел по 7.1, ненашел его. Поискал по инету, в NetBSD она присуьтсвует.options IPSEC_NAT_T
как?zingel писал(а):если очень захотеть можно модуль ядра собрать, только я 1 не буду...
ничего не понялzingel писал(а):что как, берём код и встраиваем в модульный каркас, подгружаем динамически, через loader.conf потом или kldload
Код: Выделить всё
2009-11-23 19:40:10: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.115[0]->10.0.0.51[0] spi=36958550(0x233f156)
2009-11-23 19:40:10: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.51[500]->10.0.0.115[1607] spi=3907668875(0xe8ea4b8b)
2009-11-23 19:40:10: ERROR: such policy does not already exist: "192.168.4.2/32[0] 0.0.0.0/0[0] proto=any dir=in"
2009-11-23 19:40:10: ERROR: such policy does not already exist: "0.0.0.0/0[0] 192.168.4.2/32[0] proto=any dir=out"
2009-11-23 19:40:12: ERROR: delete payload with invalid doi:0.
2009-11-23 19:40:12: INFO: ISAKMP-SA expired 10.0.0.51[500]-10.0.0.115[1607] spi:87da24876e81223c:3607420e8e36dc39
2009-11-23 19:40:13: INFO: ISAKMP-SA deleted 10.0.0.51[500]-10.0.0.115[1607] spi:87da24876e81223c:3607420e8e36dc39
2009-11-23 19:40:13: INFO: Released port 0
Код: Выделить всё
2009-11-23 19:36:46: INFO: respond new phase 1 negotiation: 10.0.0.51[500]<=>10.0.0.115[1578]
2009-11-23 19:36:46: INFO: begin Aggressive mode.
2009-11-23 19:36:46: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
2009-11-23 19:36:46: INFO: received Vendor ID: DPD
2009-11-23 19:36:46: INFO: received broken Microsoft ID: FRAGMENTATION
2009-11-23 19:36:46: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
2009-11-23 19:36:46: INFO: received Vendor ID: CISCO-UNITY
2009-11-23 19:36:46: INFO: Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02
2009-11-23 19:36:46: INFO: Adding remote and local NAT-D payloads.
2009-11-23 19:36:46: INFO: Hashing 10.0.0.115[1578] with algo #2
2009-11-23 19:36:46: INFO: Hashing 10.0.0.51[500] with algo #2
2009-11-23 19:36:46: INFO: Adding xauth VID payload.
Код: Выделить всё
10.0.0.51 10.0.0.135
esp mode=tunnel spi=2217133514(0x8426c5ca) reqid=0(0x00000000)
E: aes-cbc bed6f972 bb25166a 28cd8c52 f1b92126 5eb2148f 749e5d1a 91ee1606 11cd1e83
A: hmac-md5 85b4978e 25c60825 77e19843 5de2ceec
seq=0x00000009 replay=4 flags=0x00000000 state=mature
created: Nov 24 12:10:20 2009 current: Nov 24 12:10:38 2009
diff: 18(s) hard: 2147483(s) soft: 1717986(s)
last: Nov 24 12:10:32 2009 hard: 0(s) soft: 0(s)
current: 1272(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 9 hard: 0 soft: 0
sadb_seq=1 pid=74115 refcnt=2
10.0.0.135 10.0.0.51
esp mode=tunnel spi=86446906(0x0527133a) reqid=0(0x00000000)
E: aes-cbc a5209954 a84c5ea1 5fb0545b 634bd225 aab3fd9a 44e1437d c477cf34 efa9885a
A: hmac-md5 ba5473d3 c57a7c76 80a27243 a7ec5932
seq=0x00000009 replay=4 flags=0x00000000 state=mature
created: Nov 24 12:10:20 2009 current: Nov 24 12:10:38 2009
diff: 18(s) hard: 2147483(s) soft: 1717986(s)
last: Nov 24 12:10:32 2009 hard: 0(s) soft: 0(s)
current: 936(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 9 hard: 0 soft: 0
sadb_seq=0 pid=74115 refcnt=1
Код: Выделить всё
10.0.0.51 10.0.0.135
esp mode=tunnel spi=1889651539(0x70a1cb53) reqid=0(0x00000000)
E: aes-cbc e40b299b b7d06f6d 8d496fbc 863f1303 7d972999 99679bef 43002631 57024a5a
A: hmac-md5 4063199c 1780cedf 8d230c67 137efb01
seq=0x00000007 replay=4 flags=0x00000000 state=mature
created: Nov 24 14:08:19 2009 current: Nov 25 09:22:25 2009
diff: 69246(s) hard: 2147483(s) soft: 1717986(s)
last: Nov 24 14:08:23 2009 hard: 0(s) soft: 0(s)
current: 1272(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 7 hard: 0 soft: 0
sadb_seq=1 pid=77226 refcnt=2
10.0.0.135 10.0.0.51
esp mode=tunnel spi=29790874(0x01c6929a) reqid=0(0x00000000)
E: aes-cbc 2982ddb0 4b645f99 0d1a3465 5f6fbbff 309e312f db371d99 68b5fd10 c1992e30
A: hmac-md5 ed18aeb8 2db0213f fe6a6cf0 4812d540
seq=0x00000007 replay=4 flags=0x00000000 state=mature
created: Nov 24 14:08:19 2009 current: Nov 25 09:22:25 2009
diff: 69246(s) hard: 2147483(s) soft: 1717986(s)
last: Nov 24 14:08:23 2009 hard: 0(s) soft: 0(s)
current: 706(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 7 hard: 0 soft: 0
sadb_seq=0 pid=77226 refcnt=1
Код: Выделить всё
checking whether to support NAT-T... yes
configure: error: NAT-T requested, but no kernel support! Aborting.
===> Script "configure" failed unexpectedly.
Please report the problem to vanhu@netasq.com [maintainer] and attach the
"/usr/ports/security/ipsec-tools/work/ipsec-tools-0.7.1/config.log" including
the output of the failure of your make command. Also, it might be a good idea
to provide an overview of all packages installed on your system (e.g. an `ls
/var/db/pkg`).
*** Error code 1Код: Выделить всё
http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.ascКод: Выделить всё
The following files will be updated as part of updating to 7.2-RELEASE-p6Код: Выделить всё
http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc