debian:~# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                         [OK]
Linux Openswan U2.4.6/K2.6.18-5-k7 (netkey)
Checking for IPsec support in kernel                            [OK]
NETKEY detected, testing for disabled ICMP send_redirects           [FAILED]
 Please disable /proc/sys/net/ipv4/conf/*/send_redirects
  or NETKEY will cause the sending of bogus ICMP redirects!
NETKEY detected, testing for disabled ICMP accept_redirects         [FAILED]
  Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
  or NETKEY will accept bogus ICMP redirects!
Checking for RSA private key (/etc/ipsec.secrets)                   [DISABLED]
  ipsec showhostkey: no default key in “/etc/ipsec.secrets”
Checking that pluto is running                          [OK]
Two or more interfaces found, checking IP forwarding                [FAILED]
Checking for ‘ip’ command                               [OK]
Checking for ‘iptables’ command                         [OK]
Opportunistic Encryption Support                            [DISABLED]