Re: FreeBSD 6.3 gre and tracerouteo

2008-11-18 Thread Stephen Clark
David DeSimone wrote: Stephen Clark <[EMAIL PROTECTED]> wrote: switch (proto) { case IPPROTO_GRE: hlen += sizeof(struct gre_h); + + m->m_flags &= ~(M_DECRYPTED); + Are there security implications from removing this flag? That is a very good quest

Re: FreeBSD 6.3 gre and tracerouteo

2008-11-18 Thread David DeSimone
Stephen Clark <[EMAIL PROTECTED]> wrote: > > switch (proto) { > case IPPROTO_GRE: > hlen += sizeof(struct gre_h); > + > + m->m_flags &= ~(M_DECRYPTED); > + Are there security implications from removing this flag? -- David DeSimone == Network Admin ==

Re: FreeBSD 6.3 gre and tracerouteo

2008-11-18 Thread Stephen Clark
Bjoern A. Zeeb wrote: On Mon, 17 Nov 2008, Stephen Clark wrote: Hi, Bjoern A. Zeeb wrote: On Fri, 14 Nov 2008, Robert Noland wrote: Hi, Also just using gre's without the underlying ipsec tunnels seems to work properly. The reason for this to my knowledge is: http://www.kame.net/dev/cvswe

Re: FreeBSD 6.3 gre and tracerouteo

2008-11-18 Thread Bjoern A. Zeeb
On Mon, 17 Nov 2008, Stephen Clark wrote: Hi, Bjoern A. Zeeb wrote: On Fri, 14 Nov 2008, Robert Noland wrote: Hi, Also just using gre's without the underlying ipsec tunnels seems to work properly. The reason for this to my knowledge is: http://www.kame.net/dev/cvsweb2.cgi/kame/freebsd2/sy