Racoon.conf file error / block every tunnels below
-
Hi there,
I've been struggling with pfsense for more than an month now, and this evening I found a very interesting and tricky "bug".I migrated ~160 ipsec tunnels from an ipcop box, using a little php script of mine to generate the ipsec part of config.xml.
But I made a little mistake, and one of my tunnel had a "null_enc" attribute in the generated /var/etc/racoon.conf.
Oddly, this lead to all the tunnels "below" (greater id) the buggy one not being mounted, although working perfectly when mounted separately in a specific config.xml file.So here is the summary : when seing a "buggy" tunnel configuration, racoon seems to just "stop there" and don't try to parse the rest of the file.
I've spent ~20 hours of my time just because of this. Hope this post will help !
-
You may want to submit a report to http://ipsec-tools.sourceforge.net/ (and secondary to http://redmine.pfsense.org/projects/pfsense )