Re: NATT patch and FreeBSD's setkey

2009-04-15 Thread Scott Ullrich
On Wed, Apr 15, 2009 at 3:12 AM, VANHULLEBUS Yvan wrote: > Actually, not, because there are no bits left in inp_flags, so we are > actually looking for another location to put them. Sounds good and thanks for the information. We will be happy to test the next patch when it's ready. Thanks for

Re: NATT patch and FreeBSD's setkey

2009-04-15 Thread VANHULLEBUS Yvan
On Tue, Apr 14, 2009 at 04:24:44PM -0400, Scott Ullrich wrote: > On Thu, Feb 26, 2009 at 10:11 AM, VANHULLEBUS Yvan wrote: > > On Tue, Feb 17, 2009 at 02:41:41PM +, Bjoern A. Zeeb wrote: > [snip] > >> We have about 3 months left to get that patch in for 8; ideally 6 > >> weeks.  Can you update

Re: NATT patch and FreeBSD's setkey

2009-04-14 Thread Scott Ullrich
On Thu, Feb 26, 2009 at 10:11 AM, VANHULLEBUS Yvan wrote: > On Tue, Feb 17, 2009 at 02:41:41PM +, Bjoern A. Zeeb wrote: [snip] >> We have about 3 months left to get that patch in for 8; ideally 6 >> weeks.  Can you update the nat-t patch in a way as discussed here >> before so that the extra a

Re: NATT patch and FreeBSD's setkey

2009-02-26 Thread VANHULLEBUS Yvan
On Tue, Feb 17, 2009 at 02:41:41PM +, Bjoern A. Zeeb wrote: [...] > I am not going to find my posting from a few years back but the > solution is to keep the kernel and libipsec (and setkey) in base in > sync and not install libipsec and setkey from the ipsec-tools port. > Done. There are two

Fwd: NATT patch and FreeBSD's setkey

2009-02-17 Thread Kurt Buff
My bad - didn't send to list. See below. -- Forwarded message -- From: Kurt Buff Date: Tue, Feb 17, 2009 at 11:20 AM Subject: Re: NATT patch and FreeBSD's setkey To: "Bjoern A. Zeeb" On Tue, Feb 17, 2009 at 6:41 AM, Bjoern A. Zeeb wrote: > On Tue, 1

Re: NATT patch and FreeBSD's setkey

2009-02-17 Thread Bjoern A. Zeeb
On Tue, 17 Feb 2009, VANHULLEBUS Yvan wrote: Hi, If someone has a magic solution without drawbacks, please tell us ! I am not going to find my posting from a few years back but the solution is to keep the kernel and libipsec (and setkey) in base in sync and not install libipsec and setkey fro

Re: NATT patch and FreeBSD's setkey

2009-02-17 Thread VANHULLEBUS Yvan
On Tue, Feb 17, 2009 at 02:48:06PM +0200, Riaan Kruger wrote: > I see a lot of good work done on the nat-t patches for FreeBSD and > ipsec-tools. That's what we're trying to do, even if we know that there is still some work to do ! > I was wondering if the base setkey is due for an update? > If

NATT patch and FreeBSD's setkey

2009-02-17 Thread Riaan Kruger
I see a lot of good work done on the nat-t patches for FreeBSD and ipsec-tools. I was wondering if the base setkey is due for an update? If so is anyone looking to update it? Has anyone had any success using the patched FreeBSD along with racoon2. Regards Riaan _