FreeBSD NAT-T patch integration

Larry Baird lab at gta.com
Mon Jun 30 04:27:46 UTC 2008


> And how do I know that it works ?
> Well, when it doesn't work, I do know it, quite quickly most of the
> time !
I have to chime in here.  I did most of the initial porting of the
NAT-T patches from Kame IPSec to FAST_IPSEC.  I did look at every
line of code during this process.  I found no security problems during
the port.  Like Yvan, my company uses the NAT-T patches commercially.
Like he says, if it had problems, we would hear about it.  If the patches
don't get commited, I highly suspect Yvan or myself would try to keep the
patches up todate.  So far I have done FAST_IPSEC pacthes for FreeBSD 4,5,6.  
Yvan did 7 and 8 by himself.  Keeping up gets to be a pain after a while.  
I do plan to look at the FreeBSD 7 patches soon, but it sure would be nice
to see it commited.

Larry

-- 
------------------------------------------------------------------------
Larry Baird                        | http://www.gta.com
Global Technology Associates, Inc. | Orlando, FL
Email: lab at gta.com                 | TEL 407-380-0220, FAX 407-380-6080


More information about the freebsd-net mailing list