From owner-freebsd-net@FreeBSD.ORG  Sun May 10 02:15:03 2009
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2930A1065675
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 02:15:03 +0000 (UTC)
	(envelope-from sam@ip6.com.au)
Received: from mail01.ip6.com.au (ns1.ip6.com.au [125.255.112.202])
	by mx1.freebsd.org (Postfix) with ESMTP id DFEE48FC23
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 02:15:02 +0000 (UTC)
	(envelope-from sam@ip6.com.au)
Received: from mail01.ip6.com.au (localhost [127.0.0.1])
	by mail01.ip6.com.au (Postfix) with ESMTP id B0C22287FD
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 12:14:49 +1000 (EST)
Received: from secure.ip6.com.au (localhost [127.0.0.1])
	by mail01.ip6.com.au (Postfix) with ESMTP id 7090D2880B
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 12:14:49 +1000 (EST)
Received: from 220.233.42.226 (SquirrelMail authenticated user sam)
	by secure.ip6.com.au with HTTP; Sun, 10 May 2009 12:14:49 +1000 (EST)
Message-ID: <26744.220.233.42.226.1241921689.squirrel@secure.ip6.com.au>
Date: Sun, 10 May 2009 12:14:49 +1000 (EST)
From: "Sam Wan" <sam@ip6.com.au>
To: freebsd-net@freebsd.org
User-Agent: SquirrelMail/1.4.10a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Virus-Scanned: ClamAV using ClamSMTP
Subject: IPSEC_ESP and IPSEC_FILTERGIF in 7.2 kernel config file
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 10 May 2009 02:15:03 -0000


I tried to build a kernel include the following options, but it failed
with something like "unknown option IPSEC_ESP and IPSEC_FILTERGIF..."

options         IPSEC                   #IP security
options         IPSEC_ESP               #IP security
options         IPSEC_FILTERGIF  #filter ipsec packets from a tunnel
#options        IPSEC_NAT_T

How do I enable ipsec in 7.2? do I have to rebuild the kernel with the
IPSEC options built-in? and which options are supported at the moment?

Thanks