From owner-freebsd-security  Sun Feb 10 13:42: 5 2002
Delivered-To: freebsd-security@freebsd.org
Received: from fe000.worldonline.dk (fe000.worldonline.dk [212.54.64.194])
	by hub.freebsd.org (Postfix) with SMTP id 134BC37B4DF
	for <security@FreeBSD.ORG>; Sun, 10 Feb 2002 13:41:44 -0800 (PST)
Received: (qmail 23820 invoked by uid 0); 10 Feb 2002 21:41:41 -0000
Received: from 213.237.14.128.adsl.ho.worldonline.dk (HELO dpws) (213.237.14.128)
  by fe000.worldonline.dk with SMTP; 10 Feb 2002 21:41:41 -0000
Message-ID: <00ce01c1b27c$39f08f40$0301a8c0@dpws>
From: "Dennis Pedersen" <mlists@daydreamer.dk>
To: <security@FreeBSD.ORG>
References: <20020207163347.51C606B29@mail.cise.ufl.edu> <200202072142.g17LgDL69359@khavrinen.lcs.mit.edu>
Subject: Re: Questions (Rants?) About IPSEC
Date: Sun, 10 Feb 2002 22:45:14 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


----- Original Message -----
From: "Garrett Wollman" <wollman@khavrinen.lcs.mit.edu>
To: "James F. Hranicky" <jfh@cise.ufl.edu>
Cc: <security@FreeBSD.ORG>
Sent: Thursday, February 07, 2002 10:42 PM
Subject: Questions (Rants?) About IPSEC
> > - Clients with dynamic IPs are poorly supported.
>
> That's what the `generate_policy' option in racoon is for.
>

Uhm do you have an example where that actually works?
On the 'net' list there was a post (Message-ID:
<20020130164813.N13412@vinyl.catpipe.net>) about it where generate_policy
did'nt seem to work, and i could'nt see anything wrong with the example (not
that i'm any racoon guru i just trying to get it to work with clients that
have dynamic ip-adresses too ;))


Regards
Dennis


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message