> On Thu, Dec 29, 2005 at 09:50:47AM +0300, Alexey Popov wrote:
> > If we would also have NAT-T support, FreeBSD would be the best choice 
> > of VPN concentrator.

I just saw this patch posted on the ipsec-tools-devel list:
http://ipsec-tools.sf.net/freebsd6-natt.diff

It's for FreeBSD 6 but also seems to apply cleanly to 5.4, apart from one
file which I think needs this instead:

--- ./netinet/in_proto.c.orig   Mon Mar 21 16:05:35 2005
+++ ./netinet/in_proto.c        Fri Jan 20 21:41:59 2006
@@ -108,7 +108,7 @@
   &nousrreqs
 },
 { SOCK_DGRAM,  &inetdomain,    IPPROTO_UDP,    PR_ATOMIC|PR_ADDR,
-  udp_input,   0,              udp_ctlinput,   ip_ctloutput,
+  udp_input,   0,              udp_ctlinput,   udp_ctloutput,
   0,
   udp_init,    0,              0,              0,
   &udp_usrreqs

Haven't tested it yet - just waiting for kernel to recompile :-)

Regards,

Brian.
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to