Re: [gentoo-user-br] SETI@home

[Diego Alberto Ramponi]

Aproveitando a onda de erros bizarros.


Galera da uma olhada no log e me digam o que esta acontecendo, pq eu nao
consegui identificar o porque a maldita vpn nao esta estabelecendo conexao.
abaixo do log estao os confs ipsec.conf, l2tpd.conf e options-l2tpd

abraço....



Dec 22 17:53:28 orca ipsec_setup: Starting Openswan IPsec 2.4.4...
Dec 22 17:53:28 orca ipsec_setup: insmod
/lib/modules/2.6.11-gentoo-r3/kernel/net/key/af_key.ko
Dec 22 17:53:28 orca ipsec_setup: insmod
/lib/modules/2.6.11-gentoo-r3/kernel/net/ipv4/xfrm4_tunnel.ko
Dec 22 17:53:29 orca ipsec_setup: insmod
/lib/modules/2.6.11-gentoo-r3/kernel/net/xfrm/xfrm_user.ko
Dec 22 17:53:29 orca ipsec_setup: KLIPS ipsec0 on eth0
201.28.34.18/255.255.255.248 broadcast 201.28.34.255
Dec 22 17:53:30 orca ipsec_setup: ...Openswan IPsec started
Dec 22 17:53:38 orca l2tpd[26008]: death_handler: Fatal signal 15 received
Dec 22 17:53:39 orca l2tpd[26487]: This binary does not support kernel L2TP.
Dec 22 17:53:39 orca l2tpd[26488]: l2tpd version 0.69 started on orca
PID:26488
Dec 22 17:53:39 orca l2tpd[26488]: Linux version 2.6.11-gentoo-r3 on a i686,
listening on IP address 201.28.34.18, port 1701
Dec 22 17:55:46 orca syslog-ng[17390]: STATS: dropped 0
Dec 22 18:04:52 orca l2tpd[26488]: ourtid = 52259, entropy_buf = cc23
Dec 22 18:04:52 orca l2tpd[26488]: check_control: control, cid = 0, Ns = 0,
Nr = 0
Dec 22 18:04:52 orca l2tpd[26488]: handle_avps: handling avp's for tunnel
52259, call 0
Dec 22 18:04:52 orca l2tpd[26488]: message_type_avp: message type 1
(Start-Control-Connection-Request)
Dec 22 18:04:52 orca l2tpd[26488]: protocol_version_avp: peer is using
version 1, revision 0.
Dec 22 18:04:52 orca l2tpd[26488]: framing_caps_avp: supported peer frames:
sync
Dec 22 18:04:52 orca l2tpd[26488]: bearer_caps_avp: supported peer bearers:
Dec 22 18:04:52 orca l2tpd[26488]: firmware_rev_avp: peer reports firmware
version 1280 (0x0500)
Dec 22 18:04:52 orca l2tpd[26488]: hostname_avp: peer reports hostname
'rfc_epbx'
Dec 22 18:04:52 orca l2tpd[26488]: vendor_avp: peer reports vendor
'Microsoft'
Dec 22 18:04:52 orca l2tpd[26488]: assigned_tunnel_avp: using peer's tunnel
35
Dec 22 18:04:52 orca l2tpd[26488]: receive_window_size_avp: peer wants RWS
of 8.  Will use flow control.
Dec 22 18:04:53 orca l2tpd[26488]: ourtid = 29537, entropy_buf = 7361
Dec 22 18:04:53 orca l2tpd[26488]: check_control: control, cid = 0, Ns = 0,
Nr = 0
Dec 22 18:04:53 orca l2tpd[26488]: handle_avps: handling avp's for tunnel
29537, call 0
Dec 22 18:04:53 orca l2tpd[26488]: message_type_avp: message type 1
(Start-Control-Connection-Request)
Dec 22 18:04:53 orca l2tpd[26488]: protocol_version_avp: peer is using
version 1, revision 0.
Dec 22 18:04:53 orca l2tpd[26488]: framing_caps_avp: supported peer frames:
sync
Dec 22 18:04:53 orca l2tpd[26488]: bearer_caps_avp: supported peer bearers:
Dec 22 18:04:53 orca l2tpd[26488]: firmware_rev_avp: peer reports firmware
version 1280 (0x0500)
Dec 22 18:04:53 orca l2tpd[26488]: hostname_avp: peer reports hostname
'rfc_epbx'
Dec 22 18:04:53 orca l2tpd[26488]: vendor_avp: peer reports vendor
'Microsoft'
Dec 22 18:04:53 orca l2tpd[26488]: assigned_tunnel_avp: using peer's tunnel
35
Dec 22 18:04:53 orca l2tpd[26488]: receive_window_size_avp: peer wants RWS
of 8.  Will use flow control.
Dec 22 18:04:53 orca l2tpd[26488]: control_finish: Peer requested tunnel 35
twice, ignoring second one.
Dec 22 18:04:55 orca l2tpd[26488]: ourtid = 49602, entropy_buf = c1c2
Dec 22 18:04:55 orca l2tpd[26488]: check_control: control, cid = 0, Ns = 0,
Nr = 0
Dec 22 18:04:55 orca l2tpd[26488]: handle_avps: handling avp's for tunnel
49602, call 1886351988
Dec 22 18:04:55 orca l2tpd[26488]: message_type_avp: message type 1
(Start-Control-Connection-Request)
Dec 22 18:04:55 orca l2tpd[26488]: protocol_version_avp: peer is using
version 1, revision 0.
Dec 22 18:04:55 orca l2tpd[26488]: framing_caps_avp: supported peer frames:
sync
Dec 22 18:04:55 orca l2tpd[26488]: bearer_caps_avp: supported peer bearers:
Dec 22 18:04:55 orca l2tpd[26488]: firmware_rev_avp: peer reports firmware
version 1280 (0x0500)
Dec 22 18:04:55 orca l2tpd[26488]: hostname_avp: peer reports hostname
'rfc_epbx'
Dec 22 18:04:55 orca l2tpd[26488]: vendor_avp: peer reports vendor
'Microsoft'
Dec 22 18:04:55 orca l2tpd[26488]: assigned_tunnel_avp: using peer's tunnel
35
Dec 22 18:04:55 orca l2tpd[26488]: receive_window_size_avp: peer wants RWS
of 8.  Will use flow control.
Dec 22 18:04:55 orca l2tpd[26488]: control_finish: Peer requested tunnel 35
twice, ignoring second one.
Dec 22 18:04:57 orca l2tpd[26488]: control_xmit: Maximum retries exceeded
for tunnel 52259.  Closing.
Dec 22 18:04:57 orca l2tpd[26488]: call_close : Connection 35 closed to
10.0.0.181, port 1701 (Timeout)
Dec 22 18:04:59 orca l2tpd[26488]: ourtid = 31189, entropy_buf = 79d5
Dec 22 18:04:59 orca l2tpd[26488]: check_control: control, cid = 0, Ns = 0,
Nr = 0
Dec 22 18:04:59 orca l2tpd[26488]: handle_avps: handling avp's for tunnel
31189, call 1886351988
Dec 22 18:04:59 orca l2tpd[26488]: message_type_avp: message type 1
(Start-Control-Connection-Request)
Dec 22 18:04:59 orca l2tpd[26488]: protocol_version_avp: peer is using
version 1, revision 0.
Dec 22 18:04:59 orca l2tpd[26488]: framing_caps_avp: supported peer frames:
sync
Dec 22 18:04:59 orca l2tpd[26488]: bearer_caps_avp: supported peer bearers:
Dec 22 18:04:59 orca l2tpd[26488]: firmware_rev_avp: peer reports firmware
version 1280 (0x0500)
Dec 22 18:04:59 orca l2tpd[26488]: hostname_avp: peer reports hostname
'rfc_epbx'
Dec 22 18:04:59 orca l2tpd[26488]: vendor_avp: peer reports vendor
'Microsoft'
Dec 22 18:04:59 orca l2tpd[26488]: assigned_tunnel_avp: using peer's tunnel
35
Dec 22 18:04:59 orca l2tpd[26488]: receive_window_size_avp: peer wants RWS
of 8.  Will use flow control.
Dec 22 18:04:59 orca l2tpd[26488]: control_finish: Peer requested tunnel 35
twice, ignoring second one.
Dec 22 18:05:02 orca l2tpd[26488]: control_xmit: Unable to deliver closing
message for tunnel 52259. Destroying anyway.

l2tpd.conf
[global]                                                                ;
Global parameters:
listen-addr = 200.200.200.200
port = 1701
[lns default]                                                   ; Our
fallthrough LNS definition
ip range = 10.0.1.1 - 10.0.1.20         ; * Allocate from this IP range
local ip = 10.0.1.50                            ; * Our local IP to use
hostname = thehost
require chap = yes                                      ; * Require CHAP
auth. by peer
refuse pap = yes                                                ; * Refuse
PAP authentication
require authentication = yes                    ; * Require peer to
authenticate
ppp debug = yes                                         ; * Turn on PPP
debugging
pppoptfile = /etc/ppp/options-l2tpd     ; * ppp options file
length bit = yes                                                ; * Use
length bit in  payload?

options-l2tpd
ms-dns 10.0.0.61
ms-wins 10.0.0.1
auth
crtscts
lock
mru 1400
mtu 1400
nodetach
debug
proxyarp
ipcp-accept-local
ipcp-accept-remote
idle 1800
connect-delay 5000
nodefaultroute
require-mschap-v2
nologfd

ipsec.conf
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.2 2005/11/14 20:10:27 paul Exp $

# This file:  /usr/share/doc/openswan-2.4.4/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification
config setup
        plutodebug=none
        nat_traversal=yes
       virtual_private=%v4:10.0.0.0/16,%v4:192.168.0.0/24,%4:172.16.0.0/16

# Add connections here

# sample VPN connection
#conn sample
#               # Left security gateway, subnet behind it, nexthop toward
right.
#               left=10.0.0.1
#               leftsubnet=172.16.0.0/24
#               leftnexthop=10.22.33.44
#               # Right security gateway, subnet behind it, nexthop toward
left.
#               right=10.12.12.1
#               rightsubnet=192.168.0.0/24
#               rightnexthop=10.101.102.103
#               # To authorize this connection, but not actually start it,
#               # at startup, uncomment this.
#               #auto=start

#Disable Opportunistic Encryption
include /etc/ipsec/ipsec.d/examples/no_oe.conf
conn l2tp-cert-orgWIN2KXP
        disablearrivalcheck=no
        keyingtries=2
        compress=yes
        authby=rsasig
        pfs=no
        auto=add
        left=%defaultroute
        leftrsasigkey=%cert
        leftcert=the_cert.pem
        leftprotoport=17/0
        #
        # The remote user.
        #
        right=%any
        rightca=%same
        rightrsasigkey=%cert
        rightprotoport=17/1701
        rightsubnet=vhost:%priv,%no