strongSwan

16.04.2020

19:19 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

Tobias Brunner wrote:
> > The Rules
> >
> > [...]
>
> Do these actually work? You match packets with the mark ...

14.04.2020

22:05 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

Ok! To generalize this, i would say:
The Rules...

09.04.2020

13:56 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

Tobias Brunner wrote:
> > With this I have internet access and i get the broad- and multicasts.
>
> That's great!...

08.04.2020

00:16 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

Ok, root of the problem is return packet that is not yet DNAT-ed back after SNAT-ing (MASQUERADING). When return pack...

23:38 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

Sebastian Koschmieder wrote:
> Hello,
>
> I create the following rules
> [...]
>
> With this I have internet ...

07.04.2020

23:08 strongSwan Issue #3392: mark=%unique and no Internet-connection with VPN

I have the same situation, but without OpenVPN setup, everything the same,
if i use...

13.08.2018

05:18 strongSwan Issue #2722: Traffic begins to pass directly bypassing IPsec policies

Don't know what happened. Yes, there is something in kernel. I just rebuild it - "make distclean and make all"
Now...

10.08.2018

12:25 strongSwan Issue #2722: Traffic begins to pass directly bypassing IPsec policies

Thx for reply. Ok will try to, and will provide info a bit later...

08:51 strongSwan Issue #2722: Traffic begins to pass directly bypassing IPsec policies

Also forgot to say:
If we manually up connection:...

08:41 strongSwan Issue #2722: Traffic begins to pass directly bypassing IPsec policies

Tobias Brunner wrote:
> What are you talking about? What SA would there be to tunnel packets into if the authenticat...