从几周前开始突然连不上了，ipsec start --nofork 前台运行打印的日志显示 09[ENC] unknown attribute type (25) 09[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr CPRQ(ADDR MASK DHCP DNS ADDR6 DHCP6 DNS6 (25)) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) SA TSi TSr N(MOBIKE_SUP) ] 09[IKE] received retransmit of request with ID 1, retransmitting response 09[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 09[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 09[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (820 bytes) 16[NET] received packet: from 116.237.X.X[4500] to 64.64.X.X[4500] (512 bytes) 16[ENC] unknown attribute type (25) 16[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr CPRQ(ADDR MASK DHCP DNS ADDR6 DHCP6 DNS6 (25)) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) SA TSi TSr N(MOBIKE_SUP) ] 16[IKE] received retransmit of request with ID 1, retransmitting response 16[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 16[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 16[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (820 bytes) 10[NET] received packet: from 116.237.X.X[4500] to 64.64.X.X[4500] (512 bytes) 10[ENC] unknown attribute type (25) 10[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr CPRQ(ADDR MASK DHCP DNS ADDR6 DHCP6 DNS6 (25)) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) SA TSi TSr N(MOBIKE_SUP) ] 10[IKE] received retransmit of request with ID 1, retransmitting response 10[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 10[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 10[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (820 bytes) 07[NET] received packet: from 116.237.X.X[4500] to 64.64.X.X[4500] (512 bytes) 07[ENC] unknown attribute type (25) 07[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr CPRQ(ADDR MASK DHCP DNS ADDR6 DHCP6 DNS6 (25)) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) SA TSi TSr N(MOBIKE_SUP) ] 07[IKE] received retransmit of request with ID 1, retransmitting response 07[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 07[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (1236 bytes) 07[NET] sending packet: from 64.64.X.X[4500] to 116.237.X.X[4500] (820 bytes) 08[JOB] deleting half open IKE_SA after timeout 似乎是握手超时？各种客户端都试了，差不多都这样。
在海外买了一个VPS，为自己建立了一个VPN，这样翻墙就简单多了。但是问题就来了，访问普通被屏蔽的网站能正常访问了，比较热门的Facebook和Youtube还是不行，搜了很多资料，都没有解决。最后今天看到一篇文章说需要修改本地连接的DNS，不要用国内的，也不要用路由的那个，直接修改成google的8888和8844，重新连接一下VPN，再试试Facebook，居然一下就出来了，遇到过这样问题的朋友可以按照这个访问来修改。