IPSec + 5.2.current Problem
Alexander at Leidinger.net
Mon Aug 9 07:11:05 PDT 2004
On Mon, 9 Aug 2004 13:45:52 +0000 (UTC)
"Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net> wrote:
> On Mon, 9 Aug 2004, Alexander Leidinger wrote:
> > On Mon, 9 Aug 2004 13:21:01 +0000 (UTC)
> > "Bjoern A. Zeeb" <bzeeb-lists at lists.zabbadoz.net> wrote:
> > > > > I also had some problems with IPSEC and IPSEC_ESP, changing require
> > > > > to use in the policies fixed that. With require racoon was not able
> > > > > to initiate phase 1, because all non esp traffic was dropped.
> > >
> > > whyever I hadn't seen this posting.
> > Did you noticed Message-Id:
> > <20040805223027.7df0732b at Magellan.Leidinger.net> on -current?
> I had seen that mail but I cannot see this paragraph in there. anyway..
It's another thread without any discussion.
> > > > I think this is a datapoint... I use a "require" policy too. ATM I can't
> > > > test with "use" instead.
> > >
> > > but this problem had been fixed months ago for IPSEC.
> > Any other idea for the cause of the observed behavior?
> which on ? use vs. require ? I think this is just not HEAD.
In my case it's -current from Jul 18.
> your problem: do you really need gif(4) ? if yes - what for ?
In my case the problem doesn't matter, since using FAST_IPSEC works for
me. But I think it should be fixed for 5.3.
As you can see in the above mentioned mail, I converted a 4.x system to
-current. On 4.x I've used gif for a tunnel (as documented in the
handbook) between the FreeBSD system and a VPN appliance which isn't
under my control. Is there another way to setup a tunnel in -current?
I'm available to get hired (preferred in .lu).
http://www.Leidinger.net Alexander @ Leidinger.net
GPG fingerprint = C518 BC70 E67F 143F BE91 3365 79E2 9C60 B006 3FE7
More information about the freebsd-current