Racoon.conf file error / block every tunnels below



  • Hi there,
    I've been struggling with pfsense for more than an month now, and this evening I found a very interesting and tricky "bug".

    I migrated ~160 ipsec tunnels from an ipcop box, using a little php script of mine to generate the ipsec part of config.xml.
    But I made a little mistake, and one of my tunnel had a "null_enc" attribute in the generated  /var/etc/racoon.conf.
    Oddly, this lead to all the tunnels "below" (greater id) the buggy one not being mounted, although working perfectly when mounted separately in a specific config.xml file.

    So here is the summary : when seing a "buggy" tunnel configuration, racoon seems to just "stop there" and don't try to parse the rest of the file.

    I've spent ~20 hours of my time just because of this. Hope this post will help !



  • You may want to submit a report to http://ipsec-tools.sourceforge.net/ (and secondary to http://redmine.pfsense.org/projects/pfsense )


Log in to reply