Re: NAT-T support for IPSec stack

2005-09-05 Thread VANHULLEBUS Yvan
Hi all. Just for information, ipsec-tools version of racoon has just been integrated in the ports, with NAT-T support configured as "kernel" (which means "test if the kernel supports it"). So I guess it will now be really interesting to have kernel NAT-T support directly in FreeBSD kernel, as it

Re: NAT-T support for IPSec stack

2005-08-04 Thread Matthew Grooms
Bjoern A. Zeeb wrote: On Thu, 4 Aug 2005, Matthew Grooms wrote: There was also some mention of a third claim but it was hard to find details on the subject. Lastly, some people voiced concerns regarding ietf.org -> IPR -> Search -> NAT-T https://datatracker.ietf.org/public/ipr_detail_show.cg

RE: NAT-T support for IPSec stack

2005-08-04 Thread Bjoern A. Zeeb
On Thu, 4 Aug 2005, Matthew Grooms wrote: > Not sure if this helps at all, but I did some searching a bit to read > others comments concerning the NAT-T / IPR debate. These two documents > get mentioned repeatedly and would appear to have something to do with > other vendors decision to adopt NAT-

RE: NAT-T support for IPSec stack

2005-08-04 Thread Matthew Grooms
Not sure if this helps at all, but I did some searching a bit to read others comments concerning the NAT-T / IPR debate. These two documents get mentioned repeatedly and would appear to have something to do with other vendors decision to adopt NAT-T support. http://www.ietf.org/ietf/IPR/MICROS

Re: RE: NAT-T support for IPSec stack

2005-08-04 Thread VANHULLEBUS Yvan
On Tue, Aug 02, 2005 at 08:51:55PM +, Bjoern A. Zeeb wrote: [NAT-T, IPR, etc] > > More infos about that may be get from Emmanuel Dreyfus, a NetBSD > > developper and a member of the ipsec-tools team, which made the NetBSD > > NAT-T support, and told me a few month ago that NetBSD lawyers we

Re: RE: NAT-T support for IPSec stack

2005-08-03 Thread VANHULLEBUS Yvan
On Tue, Aug 02, 2005 at 08:51:55PM +, Bjoern A. Zeeb wrote: [IPSec, NAT-T, IPR] > do you have more info about this? I asked for more informations from NetBSD team, waiting for answers. For ipsec-tools project, our decision for such IPR potential problems was to provide features as optionnal,

Re: RE: NAT-T support for IPSec stack

2005-08-02 Thread Bjoern A. Zeeb
On Tue, 2 Aug 2005, VANHULLEBUS Yvan wrote: Hi, > > Yes ( as a user ) but I am not a FreeBSD developer. I think there was > > initially resistance from open source groups to integrate this support > > due to patent issues ( maybe just WRT usage w/ IKEv1 ) but must have > > been resolved as both O

Re: RE: NAT-T support for IPSec stack

2005-08-02 Thread VANHULLEBUS Yvan
On Tue, Aug 02, 2005 at 12:34:54PM -0500, Matthew Grooms wrote: > Woohoo!!! Thanks!!! I was just checking poking around for this last week > and wondering when someone was going to bring this support to FreeBSD. Well, I made at least one guy being happy today, cool :-) > >For some months now, i

RE: NAT-T support for IPSec stack

2005-08-02 Thread Matthew Grooms
Woohoo!!! Thanks!!! I was just checking poking around for this last week and wondering when someone was going to bring this support to FreeBSD. >For some months now, ipsec-tools is now the "official" version of >racoon, the KAME's isakmp daemon. I hope it shows up in ports soon. The racoon port