From owner-freebsd-net@FreeBSD.ORG  Tue Mar 30 03:58:54 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 38E9216A4CE
	for <freebsd-net@freebsd.org>; Tue, 30 Mar 2004 03:58:54 -0800 (PST)
Received: from mail.datazug.ch (mail201.datazug.ch [212.4.65.100])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7D22743D55
	for <freebsd-net@freebsd.org>; Tue, 30 Mar 2004 03:58:53 -0800 (PST)
	(envelope-from ruettimac@mac.com)
Received: from [192.168.0.10] [212.4.89.37] by mail.datazug.ch with ESMTP
  (SMTPD32-8.05) id A0D823F901E4; Tue, 30 Mar 2004 13:58:16 +0200
In-Reply-To: <Pine.BSF.4.53.0403301115370.714@e0-0.zab2.int.zabbadoz.net>
References: <257C203C-8104-11D8-9902-00039303AB38@mac.com>
	<20040329214057.GA8711@blossom.cjclark.org>
	<Pine.BSF.4.53.0403301115370.714@e0-0.zab2.int.zabbadoz.net>
Mime-Version: 1.0 (Apple Message framework v613)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <87BC9FE1-8241-11D8-9782-00039303AB38@mac.com>
Content-Transfer-Encoding: 7bit
From: =?ISO-8859-1?Q?Cyrill_R=FCttimann?= <ruettimac@mac.com>
Date: Tue, 30 Mar 2004 13:58:16 +0200
To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
X-Mailer: Apple Mail (2.613)
cc: freebsd-net@freebsd.org
Subject: Re: IPSec troubles
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Mar 2004 11:58:54 -0000

Hello,


> If this is the remaining problem apart from the yet known (where KAME
> people cannot find the time to review at the moment) I may look into
> this; have setup my wireless connection on a 5.2.1 notebook (being
> updated to HEAD soon) to use IPSec lately so I have a 'testbed' now.

Please can you report if IPSec is working with current or the latest  
stable?

With 5.2.1, you are lost completely. IPSec with kernel options  do not  
work and if you enable FAST_IPSEC (which should work), you end up not  
able to compile the kernel. There was a patch mentioned to solve this,  
but for me it did not work.

<http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/in6_pcb.c.diff? 
r1=1.47&r2=1.48>


Regards,

Cyrill