From owner-freebsd-security Wed Nov 7 21: 9:59 2001 Delivered-To: freebsd-security@freebsd.org Received: from mine.kame.net (kame195.kame.net [203.178.141.195]) by hub.freebsd.org (Postfix) with ESMTP id 1CA4037B405 for ; Wed, 7 Nov 2001 21:09:52 -0800 (PST) Received: from localhost ([3ffe:501:4819:bbbb::2]) by mine.kame.net (8.11.1/3.7W) with ESMTP id fA855BE14571; Thu, 8 Nov 2001 14:05:11 +0900 (JST) To: ns@BlueSkyFrog.COM Cc: avalon@cairo.anu.edu.au, freebsd-security@FreeBSD.ORG Subject: Re: KAME IPsec on low-end hardware In-Reply-To: Your message of "Thu, 8 Nov 2001 10:54:21 +1000" <20011108105421.A3785@BlueSkyFrog.COM> References: <20011108105421.A3785@BlueSkyFrog.COM> X-Mailer: Cue version 0.6 (011026-1440/sakane) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Message-Id: <20011108140840L.sakane@kame.net> Date: Thu, 08 Nov 2001 14:08:40 +0900 From: Shoichi Sakane X-Dispatcher: imput version 20000228(IM140) Lines: 18 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > I suspect that compression would also affect response times, but > omitting: > > compression_algorithm deflate; > > from racoon.conf results in a parse error. Does anyone know if > compression can be disabled? "compression_algorithm deflate;" is just a information. the compression algorithm would not be used when it was in the configuration file. when you define ipcomp to the SPD, then the compression will be used. > Also, is there much difference between racoon and isakmpd? AFAICT > isakmpd supports dymamic client IP addresses, but that seems to be the > only major difference. racoon can do too. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message