Re: transport mode IPSec with Windows 7, static keys

> Am 08.10.2015 um 11:18 schrieb VANHULLEBUS Yvan : > On Sat, Sep 26, 2015 at 08:30:57PM +0600, Victor Sudakov wrote: >> The two sysctls: >> >> net.key.preferred_oldsa=0 By the way, the actual sysctl oid is "net.key.prefered_oldsa" — preferred wrongly spelled with one 'r' only. ___

Re: Struggling with IPFW on CURRENT

> Am 07.10.2015 um 11:36 schrieb Mark Felder : > On Wed, Oct 7, 2015, at 09:31, Guido Falsi wrote: >> On 10/07/15 15:57, Mark Felder wrote: >>> Hi all, >>> >>> I've only used IPFW in the past for the most basic of tasks. I'd like to >>> use it with in-kernel NAT protecting both v4 and v6 and add

Clearance of checksum flags when decapsulating ESP packets

Please, may I ask about the rationale behind the lines 1557 to 1562 in function udp4_espdecap() of file src/sys/netinet/udp_usrreq.c on FreeBSD 10.2-RELEASE-p3. … /* * We cannot yet update the cksums so clear any * h/w cksum flags as they are no longer valid. *

Re: multiple clients behind the same NAT connecting a L2TP/IPsec VPN server behind another NAT

Hello Yvan! Many thanks for your response. Am 12.05.2011 um 06:02 schrieb VANHULLEBUS Yvan: > On Wed, May 11, 2011 at 09:43:35PM -0300, Dr. Rolf Jansen wrote: > >> The only remaining problem is, that from behind the same NAT only >> one client works well. As soon as a co

multiple clients behind the same NAT connecting a L2TP/IPsec VPN server behind another NAT

I have setup a VPN-Server on my FreeBSD 8.2 Release i386 machine, using the following requisites: - customized GENERIC Kernel builded with the following additional options and devices: IPSEC, IPSEC_FILTERTUNNEL, IPSEC_NAT_T, crypto, enc - ports/security/ipsec-tools (v0.8.0) compi