From owner-freebsd-net@FreeBSD.ORG Thu May 26 18:54:49 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 111F316A41C for ; Thu, 26 May 2005 18:54:49 +0000 (GMT) (envelope-from lee@wildcard.net.uk) Received: from ded.office.wildcard.net.uk (gw.office.wildcard.net.uk [82.138.232.49]) by mx1.FreeBSD.org (Postfix) with ESMTP id 581AB43D48 for ; Thu, 26 May 2005 18:54:47 +0000 (GMT) (envelope-from lee@wildcard.net.uk) Received: from gate.wildcard.net.uk (gate.internal.office.wildcard.net.uk [192.168.15.3]) by ded.office.wildcard.net.uk (8.12.11/8.12.11) with ESMTP id j4QIsckH008008; Thu, 26 May 2005 19:54:38 +0100 (BST) (envelope-from lee@wildcard.net.uk) Message-Id: <6.1.0.6.0.20050526195143.01bca4b8@mail.wildcardinternet.co.uk> X-Sender: ljohns@mail.wildcardinternet.co.uk X-Mailer: QUALCOMM Windows Eudora Version 6.1.0.6 Date: Thu, 26 May 2005 19:54:41 +0100 To: noackjr@alumni.rice.edu From: Lee Johnston In-Reply-To: <429619C3.5040302@alumni.rice.edu> References: <6.1.0.6.0.20050526171734.01a4a908@mail.wildcardinternet.co.uk> <20050526162736.GA51533@xor.obsecurity.org> <6.1.0.6.0.20050526173136.01bb5bd8@mail.wildcardinternet.co.uk> <429619C3.5040302@alumni.rice.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-net@freebsd.org Subject: Re: FreeBSD 5.4 - TCP MD5 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 May 2005 18:54:49 -0000 Wasn't aware that file existed sorry. For future reference if anyone else should need to get TCP MD5 Signatures working on 5.x with Quagga the correct kernel lines are: options TCP_SIGNATURE device crypto options FAST_IPSEC Regards, Lee. >So that was one of the NOTES files, what about the other? Kris said to >check the *two* NOTES files... > >$ grep MD5 /sys/i386/conf/NOTES /sys/conf/NOTES >/sys/conf/NOTES:# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) >digests. These are >/sys/conf/NOTES:# This is enabled on a per-socket basis using the >TCP_MD5SIG socket option. > >-- >Jonathan Noack | noackjr@alumni.rice.edu | OpenPGP: 0x991D8195 > > -- Lee @ Wildcard Internet t: (0845) 165 1510 f: (0845) 165 1511 m: (07795) 423 617 e: lee@wildcard.net.uk Web Development - Domains - Hosting - Co-location - Dedicated Servers