From owner-freebsd-current@FreeBSD.ORG  Sat Sep 25 14:54:57 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id AE58216A4CE; Sat, 25 Sep 2004 14:54:57 +0000 (GMT)
Received: from beagle2.mehnert.org (beagle2.mehnert.org [212.42.235.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 03F2343D58; Sat, 25 Sep 2004 14:54:57 +0000 (GMT)
	(envelope-from hannes@mehnert.org)
Received: from localhost (port-195-158-171-190.dynamic.qsc.de
	[195.158.171.190])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "Hannes Mehnert", Issuer "mehnert root CA" (verified OK))
	by beagle2.mehnert.org (Postfix) with ESMTP
	id 3A2A29585D; Sat, 25 Sep 2004 16:54:55 +0200 (CEST)
Date: Sat, 25 Sep 2004 16:55:34 +0200
From: Hannes Mehnert <hannes@mehnert.org>
To: Robert Watson <rwatson@freebsd.org>
Message-ID: <20040925145534.GD5307@mehnert.org>
References: <20040925001623.GC5307@mehnert.org>
	<Pine.NEB.3.96L.1040924225732.20796F-100000@fledge.watson.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.NEB.3.96L.1040924225732.20796F-100000@fledge.watson.org>
User-Agent: Mutt/1.4.2.1i
cc: freebsd-current@freebsd.org
Subject: Re: 5.3 IPSEC broken
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Sep 2004 14:54:57 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Sep 24, 2004 at 10:58:33PM -0400, Robert Watson wrote:
> I'd like to take a look at this sometime in the next few days.  Could you
> send me an appropriately censored version of your racoon configuration for
> each endpoint that I can use as a starting point?

Sure, my config files are available at https://berlin.ccc.de/~hannes/racoon/

I use a /30 subnet for IPSec, 192.168.2.40/30.


Best Regards,

Hannes Mehnert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)

iD8DBQFBVYbiRcuNlziBjRwRArs3AJwPLyaO77b4dOHcL+09PKTBAF7bXQCeNVpg
uBXA9AmmJVnynQn/xLSa9Gg=
=1K4Z
-----END PGP SIGNATURE-----