/etc/strongswan.d/charon/kernel-netlink.conf is in libstrongswan 5.2.1-6+deb8u6.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 | kernel-netlink {
# Firewall mark to set on the routing rule that directs traffic to our
# routing table.
# fwmark =
# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes
# MSS to set on installed routes, 0 to disable.
# mss = 0
# MTU to set on installed routes, 0 to disable.
# mtu = 0
# Whether to trigger roam events when interfaces, addresses or routes
# change.
# roam_events = yes
# Whether to set protocol and ports in the selector installed on transport
# mode IPsec SAs in the kernel.
# set_proto_port_transport_sa = no
# Lifetime of XFRM acquire state in kernel.
# xfrm_acq_expires = 165
}
|