NAT-T on current 8

[Bjoern A. Zeeb]

On Fri, 29 May 2009, Scott Ullrich wrote:

Hi Giulio,

> On Fri, May 29, 2009 at 5:41 PM, Giulio Ferro <auryn at zirakzigil.org> wrote:
>> As far as I know the natt patch hasn't been included in the source tree yet.
>> This fact notwithstanding, is there a patch I can download and apply
>> manually? I need it rather badly...
>
> There sure is.  bz@ sent this over for testing and we are using it in
> pfSense..  Works great!
>
> http://people.freebsd.org/~bz/20090523-04-natt.diff ... Please do
> follow up with feedback after you deploy.
>
> You will most likely also want the latest ipsec-tools cvs port + a few
> patches that we are also testing in pfSense... works great!
>
> http://cvs.pfsense.com/~sullrich/ipsec-tools-devel.zip ... This is a
> port file of a recent ipsec-tools cvs checkout + a few patches
> provided by vanhu@, extract to /usr/ports/security/ and make install.
>
> The NATT patch is slated to hit the FreeBSD tree soon so please do
> report back your findings.

Yes, in case you find any positiv or negative things we'd be happy to
hear back from you - or anyone else who's going to give it a try.

/bz

-- 
Bjoern A. Zeeb                      The greatest risk is not taking one.