Topic: IPSEC-5.6 Update Woes

[Jeff Fentum]

I was updating my v5.5 to 5.6 the other night, when I got a really nasty surprise. I had been using the IPSEC-Freeswan contribution from Darrel Mays site with 5.5. After updating to 5.6, I knew I would have to upsate IPSEC, so I used the Lord Sham contribution. I followed the site's how-to, but when I restarted I got the following message...

May  9 20:15:45 dallas1 ipsec: ipsec_setup: Starting FreeS/WAN IPsec 1.99...
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_socketpair_R2babf355
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol neigh_compat_output_R3c954eaa
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ___pskb_trim_Re8f62ca1
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_register_Rb1da5b9a
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_under_panic_Rf40f431c
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __kfree_skb_Rabd30c42
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol netif_rx_Rc17f7005
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol datagram_poll_Ra564078b
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_over_panic_R473b710a
May  9 20:15:45 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_fragment_R96f50f4d
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_mmap_R9c7dc531
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_bind_R025739c1
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_linearize_R1844a210
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __dev_get_by_name_Rdb1218d5
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol softnet_data_R3150b02c
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_finish_output_Rbd6b170b
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_ioctl_R9b5c459e
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol icmp_send_R1200d39b
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol irq_stat_R861c5a5e
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_getname_R1999f7a4
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_recv_datagram_R259663d4
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_init_data_R48499ac1
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol inet_add_protocol_R5023fde3
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_route_output_key_R081d7001
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_copy_datagram_iovec_R2bd3b106
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_setsockopt_R4f800fa7
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_listen_Rca1aa756
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol alloc_skb_R9057b879
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol nf_hook_slow_R17c3a7f5
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol pskb_expand_head_Rf86230b9
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_free_R5b95b351
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_accept_R002d10ab
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_free_datagram_R1ae1bc36
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_connect_R46d97903
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_getsockopt_Re2440cb0
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_copy_expand_Rba806bdb
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __ip_select_ident_R19adc00d
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol inet_del_protocol_Rdf619943
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_rfree_Reb44badf
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_run_filter_R2d87fcec
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol arp_broken_ops_R7edc3799
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_alloc_Rbab6e746
May  9 20:15:46 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_wfree_R6e7a08f8
May  9 20:15:46 dallas1 ipsec: ipsec_setup: Using /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /sbin/insmod /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_socketpair_R2babf355
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol neigh_compat_output_R3c954eaa
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ___pskb_trim_Re8f62ca1
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_register_Rb1da5b9a
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_under_panic_Rf40f431c
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __kfree_skb_Rabd30c42
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol netif_rx_Rc17f7005
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol datagram_poll_Ra564078b
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_over_panic_R473b710a
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_fragment_R96f50f4d
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_mmap_R9c7dc531
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_bind_R025739c1
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_linearize_R1844a210
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __dev_get_by_name_Rdb1218d5
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol softnet_data_R3150b02c
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_finish_output_Rbd6b170b
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_ioctl_R9b5c459e
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol icmp_send_R1200d39b
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol irq_stat_R861c5a5e
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_getname_R1999f7a4
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_recv_datagram_R259663d4
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_init_data_R48499ac1
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol inet_add_protocol_R5023fde3
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol ip_route_output_key_R081d7001
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_copy_datagram_iovec_R2bd3b106
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_setsockopt_R4f800fa7
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_listen_Rca1aa756
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol alloc_skb_R9057b879
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol nf_hook_slow_R17c3a7f5
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol pskb_expand_head_Rf86230b9
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_free_R5b95b351
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_accept_R002d10ab
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_free_datagram_R1ae1bc36
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_connect_R46d97903
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_no_getsockopt_Re2440cb0
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol skb_copy_expand_Rba806bdb
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol __ip_select_ident_R19adc00d
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol inet_del_protocol_Rdf619943
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_rfree_Reb44badf
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_run_filter_R2d87fcec
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol arp_broken_ops_R7edc3799
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sk_alloc_Rbab6e746
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: unresolved symbol sock_wfree_R6e7a08f8
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: insmod /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o failed
May  9 20:15:50 dallas1 ipsec: ipsec_setup: /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o: insmod ipsec failed
May  9 20:15:50 dallas1 ipsec: ipsec_setup: Using /lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o
May  9 20:15:50 dallas1 ipsec: ipsec_setup: Symbol version prefix ''
May  9 20:15:50 dallas1 ipsec: ipsec_setup: kernel appears to lack KLIPS
May  9 20:15:50 dallas1 ipsec: ipsec_setup: OOPS, should have aborted!  Broken shell!
May  9 20:15:50 dallas1 rc: Starting ipsec:  failed

Not only did IPSEC fail to load, I could not access my SME box from either eth0 or eth1! Panic ensued (I'm not very experienced with the Linux/Unix shell programs) and I soon found that as long as I booted from the recovery diskette, everything (except IPSEC) worked fine. When I booted without the diskette, I could not access the server via the network, and the Server Manager would quit everytime I tried to access it from the server itself.

Now, here's my main question: What do I need to do to get my server to boot correctly without using the recovery diskette?

Do I need to wipe off IPSEC? I've already tried to uninstall the IPSEC rpm using the "rpm -e" command, but I kept getting the message that the rpm was not installed! I guess I need to manually delete all of the IPSEC files, but I'm fearful of permanently fouling up my box.

In the meantime, I'm using the optional backup2ws panel to create a Disaster Recovery backup. Right now the plan is to create the backup, do a clean install of 5.6, run the updates, install any optional RPMs (including Freeswan), and run a recovery session from my backup to restore all users, passwords, email, ibays, settings, etc.

I realize there's a lot of info here. I'm just trying to restore my box to good working order, without losing any data (and with a minimum of downtime).

[guestHH]

1. what is the exact command you use to uninstall?

rpm -e devinfo-freeswan
rpm -e freeswan
rpm -e freeswan-modules

Should do the trick.

2. Did you use the correct freeswan-modules rpm for your architecture?

uname -a will give the answer for .i386, .i586, i686

Regards,
guestHH

[Jeff Fentum]

"1. what is the exact command you use to uninstall?

rpm -e devinfo-freeswan
rpm -e freeswan
rpm -e freeswan-modules

Should do the trick."

The first one, "rpm -e devinfo-freeswan", did what it was supposed to do, but when I performed the other 2, I got a message saying that IPSEC was not found. I noticed that the panel in server-manager was removed, but when I ran a "locate ipsec" from the shell I still got a bunch of files that it found (see results below). Should I manually remove these as well? What I would like to do is to completely remove/clean all remnants of my previous Freeswan installations and start from scratch. If I should manually remove these, is that all that could be removed?

Also, I did do the "uname -a" before I installed, and it returned a i686. I know that my processor is an Athlon, and that there is a freeswan module for Athlons. Should I have used that one instead of the i686?

Now, here's the results of my locate ipsec (it's kinda long--and it's not edited).

# locate ipsec
/var/run/ipsec.info
/dev/ipsec
/etc/rc.d/init.d/ipsec
/etc/rc.d/rc0.d/K68ipsec
/etc/rc.d/rc1.d/K68ipsec
/etc/rc.d/rc2.d/S47ipsec
/etc/rc.d/rc3.d/S47ipsec
/etc/rc.d/rc4.d/S47ipsec
/etc/rc.d/rc5.d/S47ipsec
/etc/rc.d/rc6.d/K68ipsec
/etc/rc.d/rc7.d/S99ipsec
/etc/e-smith/events/actions/conf-ipsec
/etc/e-smith/events/actions/conf-ipsec-secrets
/etc/e-smith/events/actions/conf-ipsec-startup
/etc/e-smith/events/actions/mail-ipsec-key
/etc/e-smith/events/actions/restart-ipsec
/etc/e-smith/events/post-install/S60conf-ipsec-startup
/etc/e-smith/events/bootstrap-console-save/S55conf-ipsec
/etc/e-smith/events/bootstrap-console-save/S55conf-ipsec-startup
/etc/e-smith/events/console-save/S55conf-ipsec-startup
/etc/e-smith/events/console-save/S55conf-ipsec
/etc/e-smith/events/console-save/S70restart-ipsec
/etc/e-smith/events/post-upgrade/S60conf-ipsec-startup
/etc/e-smith/events/post-upgrade/S55conf-ipsec
/etc/e-smith/events/ip-change/S70restart-ipsec
/etc/e-smith/events/ip-change/S55conf-ipsec
/etc/e-smith/events/ipsec-install
/etc/e-smith/events/ipsec-install/S45conf-ipsec-startup
/etc/e-smith/events/ipsec-install/S50conf-masq
/etc/e-smith/events/ipsec-install/S55restart-masq
/etc/e-smith/events/ipsec-install/S60conf-ipsec-secrets
/etc/e-smith/events/ipsec-install/S65conf-ipsec
/etc/e-smith/events/ipsec-install/S70restart-ipsec
/etc/e-smith/events/post-restore/S60conf-ipsec-startup
/etc/e-smith/events/post-restore/S55conf-ipsec
/etc/e-smith/events/vpn-create/S70restart-ipsec
/etc/e-smith/events/vpn-create/S55conf-ipsec
/etc/e-smith/events/vpn-delete/S70restart-ipsec
/etc/e-smith/events/vpn-delete/S55conf-ipsec
/etc/e-smith/events/vpn-modify/S70restart-ipsec
/etc/e-smith/events/vpn-modify/S55conf-ipsec
/etc/e-smith/templates/etc/ipsec.conf
/etc/e-smith/templates/etc/ipsec.conf/20Default
/etc/e-smith/templates/etc/ipsec.conf/10Setup
/etc/e-smith/templates/etc/ipsec.conf/40LocalAttributes
/etc/e-smith/templates/etc/ipsec.conf/30Connections
/etc/e-smith/templates/etc/ipsec.conf/template-begin
/etc/e-smith/templates/etc/ipsec.conf/template-end
/etc/e-smith/templates/etc/ipsec.secrets
/etc/e-smith/templates/etc/ipsec.secrets/template-begin
/etc/e-smith/templates/etc/ipsec.secrets/10RSAKey
/etc/e-smith/templates/etc/ipsec.secrets/template-end
/etc/ipsec.conf
/etc/ipsec.conf.orig
/etc/ipsec.secrets.orig
/etc/ipsec.secrets
/etc/ipsec.conf.prerpm
/etc/ipsec.conf.prerpm.~1~
/etc/ipsec.secrets.prerpm
/usr/local/man/man3/ipsec_addrbytesof.3
/usr/local/man/man3/ipsec_addrbytesptr.3
/usr/local/man/man3/ipsec_addrcmp.3
/usr/local/man/man3/ipsec_addrinsubnet.3
/usr/local/man/man3/ipsec_addrlenof.3
/usr/local/man/man3/ipsec_addrtoa.3
/usr/local/man/man3/ipsec_addrtosubnet.3
/usr/local/man/man3/ipsec_addrtot.3
/usr/local/man/man3/ipsec_addrtypeof.3
/usr/local/man/man3/ipsec_anyaddr.3
/usr/local/man/man3/ipsec_atoaddr.3
/usr/local/man/man3/ipsec_atoasr.3
/usr/local/man/man3/ipsec_atosa.3
/usr/local/man/man3/ipsec_atosubnet.3
/usr/local/man/man3/ipsec_atoul.3
/usr/local/man/man3/ipsec_bitstomask.3
/usr/local/man/man3/ipsec_broadcastof.3
/usr/local/man/man3/ipsec_copyright_notice.3
/usr/local/man/man3/ipsec_datatot.3
/usr/local/man/man3/ipsec_goodmask.3
/usr/local/man/man3/ipsec_hostof.3
/usr/local/man/man3/ipsec_initaddr.3
/usr/local/man/man3/ipsec_initsaid.3
/usr/local/man/man3/ipsec_initsubnet.3
/usr/local/man/man3/ipsec_isanyaddr.3
/usr/local/man/man3/ipsec_isloopbackaddr.3
/usr/local/man/man3/ipsec_isunspecaddr.3
/usr/local/man/man3/ipsec_keyblobtoid.3
/usr/local/man/man3/ipsec_loopbackaddr.3
/usr/local/man/man3/ipsec_maskof.3
/usr/local/man/man3/ipsec_masktobits.3
/usr/local/man/man3/ipsec_masktocount.3
/usr/local/man/man3/ipsec_networkof.3
/usr/local/man/man3/ipsec_optionsfrom.3
/usr/local/man/man3/ipsec_portof.3
/usr/local/man/man3/ipsec_prng.3
/usr/local/man/man3/ipsec_prng_bytes.3
/usr/local/man/man3/ipsec_prng_final.3
/usr/local/man/man3/ipsec_prng_init.3
/usr/local/man/man3/ipsec_rangetoa.3
/usr/local/man/man3/ipsec_rangetosubnet.3
/usr/local/man/man3/ipsec_sameaddr.3
/usr/local/man/man3/ipsec_sameaddrtype.3
/usr/local/man/man3/ipsec_samesaid.3
/usr/local/man/man3/ipsec_samesubnet.3
/usr/local/man/man3/ipsec_samesubnettype.3
/usr/local/man/man3/ipsec_satoa.3
/usr/local/man/man3/ipsec_satot.3
/usr/local/man/man3/ipsec_setportof.3
/usr/local/man/man3/ipsec_sockaddrlenof.3
/usr/local/man/man3/ipsec_sockaddrof.3
/usr/local/man/man3/ipsec_splitkeytoid.3
/usr/local/man/man3/ipsec_subnetinsubnet.3
/usr/local/man/man3/ipsec_subnetishost.3
/usr/local/man/man3/ipsec_subnetof.3
/usr/local/man/man3/ipsec_subnettoa.3
/usr/local/man/man3/ipsec_subnettot.3
/usr/local/man/man3/ipsec_subnettypeof.3
/usr/local/man/man3/ipsec_tnatoaddr.3
/usr/local/man/man3/ipsec_ttoaddr.3
/usr/local/man/man3/ipsec_ttodata.3
/usr/local/man/man3/ipsec_ttosa.3
/usr/local/man/man3/ipsec_ttosubnet.3
/usr/local/man/man3/ipsec_ttoul.3
/usr/local/man/man3/ipsec_ultoa.3
/usr/local/man/man3/ipsec_ultot.3
/usr/local/man/man3/ipsec_unspecaddr.3
/usr/local/man/man3/ipsec_version.3
/usr/local/man/man3/ipsec_version_code.3
/usr/local/man/man3/ipsec_version_string.3
/usr/local/man/man5/ipsec.conf.5
/usr/local/man/man5/ipsec.secrets.5
/usr/local/man/man5/ipsec_eroute.5
/usr/local/man/man5/ipsec_klipsdebug.5
/usr/local/man/man5/ipsec_pf_key.5
/usr/local/man/man5/ipsec_spi.5
/usr/local/man/man5/ipsec_spigrp.5
/usr/local/man/man5/ipsec_tncfg.5
/usr/local/man/man5/ipsec_version.5
/usr/local/man/man8/ipsec.8
/usr/local/man/man8/ipsec_auto.8
/usr/local/man/man8/ipsec_barf.8
/usr/local/man/man8/ipsec_eroute.8
/usr/local/man/man8/ipsec_ikeping.8
/usr/local/man/man8/ipsec_klipsdebug.8
/usr/local/man/man8/ipsec_look.8
/usr/local/man/man8/ipsec_manual.8
/usr/local/man/man8/ipsec_newhostkey.8
/usr/local/man/man8/ipsec_pf_key.8
/usr/local/man/man8/ipsec_pluto.8
/usr/local/man/man8/ipsec_ranbits.8
/usr/local/man/man8/ipsec_rsasigkey.8
/usr/local/man/man8/ipsec_send-pr.8
/usr/local/man/man8/ipsec_setup.8
/usr/local/man/man8/ipsec_showdefaults.8
/usr/local/man/man8/ipsec_showhostkey.8
/usr/local/man/man8/ipsec_spi.8
/usr/local/man/man8/ipsec_spigrp.8
/usr/local/man/man8/ipsec_tncfg.8
/usr/local/man/man8/ipsec_whack.8
/usr/local/man/man8/ipsec_calcgoo.8
/usr/local/man/man8/ipsec_verify.8
/usr/local/lib/ipsec
/usr/local/lib/ipsec/_confread
/usr/local/lib/ipsec/_copyright
/usr/local/lib/ipsec/_include
/usr/local/lib/ipsec/_keycensor
/usr/local/lib/ipsec/_pluto_adns
/usr/local/lib/ipsec/_plutoload
/usr/local/lib/ipsec/_plutorun
/usr/local/lib/ipsec/_realsetup
/usr/local/lib/ipsec/_secretcensor
/usr/local/lib/ipsec/_startklips
/usr/local/lib/ipsec/_updown
/usr/local/lib/ipsec/auto
/usr/local/lib/ipsec/barf
/usr/local/lib/ipsec/eroute
/usr/local/lib/ipsec/ikeping
/usr/local/lib/ipsec/ipsec
/usr/local/lib/ipsec/ipsec_pr.template
/usr/local/lib/ipsec/klipsdebug
/usr/local/lib/ipsec/look
/usr/local/lib/ipsec/manual
/usr/local/lib/ipsec/newhostkey
/usr/local/lib/ipsec/pf_key
/usr/local/lib/ipsec/pluto
/usr/local/lib/ipsec/ranbits
/usr/local/lib/ipsec/rsasigkey
/usr/local/lib/ipsec/send-pr
/usr/local/lib/ipsec/setup
/usr/local/lib/ipsec/showdefaults
/usr/local/lib/ipsec/showhostkey
/usr/local/lib/ipsec/spi
/usr/local/lib/ipsec/spigrp
/usr/local/lib/ipsec/tncfg
/usr/local/lib/ipsec/whack
/usr/local/lib/ipsec/_updown.orig
/usr/local/lib/ipsec/uml_netjig
/usr/local/lib/ipsec/calcgoo
/usr/local/lib/ipsec/_updown_1.99
/usr/local/lib/ipsec/verify
/usr/local/lib/ipsec/_updown.prerpm
/usr/local/sbin/ipsec
/usr/lib/perl5/5.6.1/i386-linux/linux/ipsec.ph
/lib/modules/2.4.18-5/kernel/net/ipsec
/lib/modules/2.4.18-5/kernel/net/ipsec/ipsec.o
/lib/modules/2.4.18-5smp/kernel/net/ipsec
/lib/modules/2.4.18-5smp/kernel/net/ipsec/ipsec.o

[guestHH]

yeah, use the athlon module