RE: [Users] behind a firewall

From: Simpson, Doug (dsimpson_at_friedmancorp.com)
Date: Wed Jan 08 2003 - 22:50:56 CET


i am running 1.99 with x509. I am guessing that this needs to be patched.
Does this mean reconfiguring the kernel?

-----Original Message-----
From: Ken Bantoft [mailto:ken_at_freeswan.ca]
Sent: Wednesday, January 08, 2003 12:41 PM
To: Simpson, Doug
Cc: 'Ken Bantoft'; 'users_at_lists.freeswan.org'
Subject: RE: [Users] behind a firewall

-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 8 Jan 2003, Simpson, Doug wrote:

> Ken,
> Thank you for the info.
> "IPSec Passthru support on your "router or firewall"" - does this mean
that
> if my Router/Firewall does not have the ability to do "IPSec Passthru"
then
> I am SOL? I need to purchase a router/firewall that does?
> Doug

No. If your router/firewall does NOT support IPSec Passthru, you'll need
the NAT-T patches on FreeS/WAN.

See http://open-source.arkoon.net or replace your FreeS/WAN with Super
FreeS/WAN (which includes the NAT-T patches)
http://www.freeswan.ca/code/super-freeswan

See SSH Sentinel docs for how to enable this - it's supported.

- --
Ken Bantoft The Unoffical FreeS/WAN Site:
ken_at_freeswan.ca http://www.freeswan.ca
                           PGP Key: finger ken_at_bantoft.org
"We can factor the number 15 with quantum computers. We
can also factor the number 15 with a dog trained to bark
three times." -- Robert Harley, 5/12/01, Sci.crypt

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBPhxwzliWUusaxGxpAQFh8gP/WcZV09l/Ni08TCXoFY5wlQwD9/ThPN60
tMqHFBMURGIafZH0et8rSooqHHYXEqHTK2ceNFuzEeuFt4e1ojWc5asrUG0nm376
qujAXihalY4cemrBUJv72kEQ5uRhUVI5hftxGnrkgOpxnj/ZqjdAVxBH9EQAeC3K
3yWrb53RJlw=
=ZZH9
-----END PGP SIGNATURE-----

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.5 : Fri Jan 10 2003 - 05:21:18 CET