From owner-freebsd-security Thu Dec 6 15: 7:13 2001 Delivered-To: freebsd-security@freebsd.org Received: from mine.kame.net (kame195.kame.net [203.178.141.195]) by hub.freebsd.org (Postfix) with ESMTP id 5712E37B421 for ; Thu, 6 Dec 2001 15:07:08 -0800 (PST) Received: from localhost ([3ffe:501:41c:2000:f5b8:e3ad:b861:da85]) by mine.kame.net (8.11.1/3.7W) with ESMTP id fB6N0SL05738; Fri, 7 Dec 2001 08:00:28 +0900 (JST) To: jack_xiao99@hotmail.com Cc: freebsd-security@FreeBSD.ORG Subject: Re: SA regenerated problems In-Reply-To: Your message of "Thu, 6 Dec 2001 10:32:13 -0500" References: X-Mailer: Cue version 0.6 (011026-1440/sakane) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Message-Id: <20011207080722Z.sakane@kame.net> Date: Fri, 07 Dec 2001 08:07:22 +0900 From: Shoichi Sakane X-Dispatcher: imput version 20000228(IM140) Lines: 11 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Thanks for your answer, I almost get the answer. Actually, there is some > problem in the kernel ipsec stack, the version of KAME I am using is too > old. Some one suggested me to upgrade to FreeBSD4.4. Any thoughts about > that? upgrading to new version is one of good solutions. i believe there is no problem of the ipsec manual configuration in the freebsd4.2 ipsec stack. when you use latest racoon on the 4.2, some functions of racoon may not be used. /Shoichi Sakane @ KAME project/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message