[Strog]

I upgraded my firewall to a snapshot from Dec 3rd. I installed it last night after testing it this week on a spare machine. It seemed stable and the install went fine. I got it up and running with the basics and it's passing packets just fine.

I moved my isakmpd configs over and fired it up and it whines about it
[code:1:1d4e031dce]
Default conf_file_secrecy: not loading /etc/isakmpd/isakmpd.conf - too open permissions
Default conf_file_secrecy: not loading /etc/isakmpd/isakmpd.policy - too open permissions
[/code:1:1d4e031dce]

I went to bed late tinkering with it but haven't gotten too far with it yet. I'll look some more tonight. Probably going to make use certs or some other fun. :D

Anyone else have any isakmpd issues when upgrading to 3.4 and beyond?

[bsdjunkie]

I havnt successfully gotten back on the VPN yet after my upgrade as well.
I will look again tonite at all my configs and see whats up...

[Strog]

Did you go to 3.4 or are you running current again?

8)

[Strog]

A simple fix. It needs to have 600 permissions.

Now on to ipv6, priority queuing, intrusion detection, etc. 8)

[Vile]

In case anyone wants to find the (old and outdated) faq on ipsec, it is located here:

http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/faq13.html?rev=1.79&content-type=text/html