Reakce na odpověď

No, to je právě ono, já se moc nevyznám v tom, jak ty data vlastně z toho stroje putují, protože když si všimneš v ifconfig, tak jdou přes interface venet0, který je právě loopback. S multiip si ještě moc nevím rady.

Routa je defaultní, jak je po instalaci od providera (taky mi nejde do hlavy )

Maškarádu bych zatím neřešil, ještě ani VPN klienta nemám připojeného na server.

/var/log/auth.log

Nov  8 16:31:59 polesi69 pluto[9864]: using /dev/urandom as source of random entropy
Nov  8 16:31:59 polesi69 pluto[9861]: address family inconsistency in this connection=2 host=2/nexthop=0
Nov  8 16:31:59 polesi69 pluto[9861]: attempt to load incomplete connection
Nov  8 16:31:59 polesi69 pluto[9861]: listening for IKE messages
Nov  8 16:31:59 polesi69 pluto[9861]: adding interface venet0:0/venet0:0 8.123.456.789:500
Nov  8 16:31:59 polesi69 pluto[9861]: adding interface venet0/venet0 127.0.0.2:500
Nov  8 16:31:59 polesi69 pluto[9861]: adding interface lo/lo 127.0.0.1:500
Nov  8 16:31:59 polesi69 pluto[9861]: adding interface lo/lo ::1:500
Nov  8 16:31:59 polesi69 pluto[9861]: loading secrets from "/etc/ipsec.secrets"
Nov  8 16:31:59 polesi69 pluto[9861]: loading secrets from "/var/lib/openswan/ipsec.secrets.inc"

#ipsec verify

Linux Openswan U2.6.37/K2.6.32-042stab093.5 (netkey)
Checking for IPsec support in kernel                            [OK]
 SAref kernel support                                           [N/A]
 NETKEY:  Testing XFRM related proc values                      [FAILED]

  Please disable /proc/sys/net/ipv4/conf/*/send_redirects
  or NETKEY will cause the sending of bogus ICMP redirects!

        [FAILED]

  Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
  or NETKEY will accept bogus ICMP redirects!

        [OK]
Checking that pluto is running                                  [OK]
 Pluto listening for IKE on udp 500                             [OK]
 Pluto listening for NAT-T on udp 4500                          [FAILED]
Two or more interfaces found, checking IP forwarding            [FAILED]
Checking NAT and MASQUERADEing                                  [OK]
Checking for 'ip' command                                       [OK]
Checking /bin/sh is not /bin/dash                               [WARNING]
Checking for 'iptables' command                                 [OK]
Opportunistic Encryption Support                                [DISABLED]

Nefunguje připojení tunelem na VPS pomocí IPSec