Date: Tue, 04 Feb 1997 15:06:58 -0800 From: Jim Binkley <jrb@cs.pdx.edu> To: freebsd-security@FreeBSD.org Subject: release of ipsec for freebsd Message-ID: <199702042306.PAA18695@sirius.cs.pdx.edu> In-Reply-To: Your message of "Tue, 13 Aug 1996 09:48:47 %2B0200." <199608130748.AA198942528@euro.eurocontrol.fr>
next in thread | previous in thread | raw e-mail | index | archive | help
If anyone should be interested in the IP Security WG efforts (IPSEC wg), we have made a port of last summer's NRL/ipsec code for IPv4 (not v6) into freebsd 2.1.0, which is our current Mobile-IP kernel src base. This is NOT just mobile-ip oriented, but is aimed at more general network security. The src includes some test apps, some but not all NRL supplied utilities, some test apps of our own, and complete kernel src. In order to get the release, please see the web page: http://www.cs.pdx.edu/research/SMN/index.html, and page down to "PSU IPSEC/FreeBSD port". You have to grab two gzip'ed tar archives, one at PSU, and one at MIT. The latter is for the "export controlled" portion. a few feature (or lack thereof) points: 1. for IPv4, not IPv6 2. experimental!. you must be a kernel hacker 3. NRL's ipsec was transport (socket) oriented. We kept that and added a 1st cut routing binding too (you can view this as a virtual private network mechanism). 4. routes using route(8) or arp(8) can have a ESP/DES binding (and RSN will have an AH/<md5, etc> binding too). 5. our virtual tunnel driver which is part of our MIP implementation but is crucial to the IPSEC stuff too. 6. our Mobile-IP (MIP) kernel routing hacks which don't hurt anything normal and can be ignored if you don't care about Mobile-IP. 7. a couple of simple tcp/udp apps to test and demo the transport (socket) IPSEC bindings. 8. btw, the NRL key(8) utility has been renamed as ipkey(8), as key() already existed. 9. includes (obviousally) NRL's key socket in its form as of last summer. We are starting a majordomo mailing list at PSU. the list name is: freebsd-ipsec@cs.pdx.edu, majordomo@cs.pdx.edu to join. We do not guarantee to "maintain" this or fix bugs or whatever. We are however in the process of improving it and are hoping to finish some parts, and fix some bugs in another release in a few months. Jim Binkley jrb@cs.pdx.edu
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199702042306.PAA18695>