I'm attempting to try out Opportunistic Encryption on my
local network.
I have a dns server set up running djbdns with what I
thought was all
the TXT records I would need. The output of ipsec verify
however is a
little confusing:
Opportunistic Encryption DNS checks:
Looking for TXT in forward dns zone: lithium
[OK]
Does the machine have at least one non-private address?
[OK]
Looking for TXT in reverse dns zone:
d.c.b.a.in-addr.arpa. [OK]
Looking for TXT in reverse dns zone: net. mydomain.in-addr.arpa.
[MISSING]
What is that fourth check looking for exactly? I have a TXT
record for
c.b.a.in-addr.arpa, I tried inserting a record for
net. mydomain.in-addr.arpa, but that didn't work either.
_______________________________________________
Users openswan.org
http
://lists.openswan.org/mailman/listinfo/users
Building and Integrating Virtual Private Networks with
Openswan:
http://www.amazon.com/gp/product/1904811
256/104-3099591-2946327?n=283155
|