On Fri, 29 Aug 2003, Herbert Xu wrote: > John Leach <[EMAIL PROTECTED]> wrote: > > I haven't been able to get Linux to send any ESP packets at all yet. > Your setkey command is probably incompatible with your kernel. > > Try recompiling setkey from the upstream source. If you use the > Debian source then you must make sure that the header files are > really coming from the kernel as opposed to the copy included in > the Debian package.
Herbert, it would be a Very Good Thing if Debian sarge shipped IPSEC ready to go out-of-the-box (provided one installed the correct packages and configured them, I suppose). Are we at that stage yet? What is needed to get IPSEC as included in your kernel images to work out-of-the-box (after configured), without the need for anything not packaged in Debian? -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh
