Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Jan 2006 23:21:19 +0100
From:      VANHULLEBUS Yvan <vanhu_bsd@zeninc.net>
To:        freebsd-net@freebsd.org
Subject:   Re:  IPSEC documentation
Message-ID:  <20060120222119.GA2889@zen.inc>
In-Reply-To: <20060120215333.GA48603@uk.tiscali.com>
References:  <20051228143817.GA6898@uk.tiscali.com> <001401c60bc0$a3c87e90$1200a8c0@gsicomp.on.ca> <20051228153106.GA7041@uk.tiscali.com> <20051228164339.GB3875@zen.inc> <43B38747.1060906@iteranet.com> <20051229122549.GA11055@uk.tiscali.com> <20060120215333.GA48603@uk.tiscali.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 20, 2006 at 09:53:33PM +0000, Brian Candler wrote:
> > On Thu, Dec 29, 2005 at 09:50:47AM +0300, Alexey Popov wrote:
> > > If we would also have NAT-T support, FreeBSD would be the best choice 
> > > of VPN concentrator.
> 
> I just saw this patch posted on the ipsec-tools-devel list:
> http://ipsec-tools.sf.net/freebsd6-natt.diff

I already posted the URL of this patch here some months ago, it's
integration is being discussed with various people (and I never took
time to send a PR).

There are still some things to do from this patch, including sync with
NetBSD recent features, NAT-T support for FAST_IPSEC, and provide a
cleaner to help racoon's configure guess if there is kernel NAT-T
support.

I won't have time to work on that before next month.


> It's for FreeBSD 6 but also seems to apply cleanly to 5.4, apart from one
> file which I think needs this instead:

I first ported FreeBSD 4's patch to FreeBSD 5, then I ported it to
FreeBSD 6, and fixed some various things. FreeBSD5 to FreeBSD6 was
really more a cleanup and a rediff (lines numbers changed, etc...)
than a "port".

Except the indentation changes you reported (introduced between
FreeBSD6-RELEASE and FreeBSD6-STABLE), it should work without problems
on FreeBSD5, but I don't really want to maintain a separate FreeBSD5
patch, unless there is really some important needs for it !


Yvan.

-- 
NETASQ - Secure Internet Connectivity
http://www.netasq.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060120222119.GA2889>