Date: Wed, 21 Feb 2001 22:53:55 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Stephen Cimarelli <stephen@clari.net.au> Cc: freebsd-net@freebsd.org Subject: Re: Help with IPSEC Message-ID: <20010221225355.A68921@mollari.cthul.hu> In-Reply-To: <XFMail.010221100009.stephen@clari.net.au>; from stephen@clari.net.au on Wed, Feb 21, 2001 at 10:00:09AM %2B1100 References: <XFMail.010221100009.stephen@clari.net.au>
next in thread | previous in thread | raw e-mail | index | archive | help
--7JfCtLOvnd9MIVvH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Wed, Feb 21, 2001 at 10:00:09AM +1100, Stephen Cimarelli wrote: > * Most users seem to use gif devices to setup the tunnels instead of IPsec > tunnels, Why? gif is the name of the device used to implement tunneling. > What ports/protocols do I need to allow through a firewall to allow gif and > IPsec to work? gif isn't a protocol, it's an interface name. Check /etc/protocols for the protocol number of the AH and ESP protocols, which IPSEC uses depending on which mode you run it in. Kris --7JfCtLOvnd9MIVvH Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6lLeDWry0BWjoQKURAqK5AKCDCNbmd1x5EdpnddRqx78/8hOhMgCfQvYO P/5SrFdRSEhVzKZAVwG0yuk= =fJDV -----END PGP SIGNATURE----- --7JfCtLOvnd9MIVvH-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010221225355.A68921>