Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Nov 2001 03:31:51 +0100
From:      =?iso-8859-1?Q?R=E9mi_Guyomarch?= <rguyom@pobox.com>
To:        Lamont Granquist <lamont@scriptkiddie.org>, FreeBSD Security List <freebsd-security@FreeBSD.ORG>
Subject:   Re: Bump-in-the-Road IPsec?
Message-ID:  <20011113033151.A56326@diabolo.ifn.fr>
In-Reply-To: <20011113031438.A45472@diabolic-cow.chatgris.net>; from rguyom@pobox.com on Tue, Nov 13, 2001 at 03:14:38AM %2B0100
References:  <20011112164936.F538-100000@coredump.scriptkiddie.org> <20011113031438.A45472@diabolic-cow.chatgris.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 13, 2001 at 03:14:38AM +0100, Rémi Guyomarch wrote:
...
> On OpenBSD, use the gif device, along with IPSec in transport mode
> and the same bridge setup as described below.

Damn! I just realised that gif(4) only handles IP frames :-(
Still a transparent bridge, but only suitable for IP...
[same thing with gre(4)]

So far, for full ethernet-over-ip the only solution I see is vtun with
a tap(4) device. Maybe someone there will feel creative with netgraph ? ;)

-- 
Rémi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011113033151.A56326>