From owner-freebsd-security  Thu Nov  8  6:56:24 2001
Delivered-To: freebsd-security@freebsd.org
Received: from boromir.vpop.net (dns1.vpop.net [206.117.147.2])
	by hub.freebsd.org (Postfix) with ESMTP id 7682337B416
	for <freebsd-security@freebsd.org>; Thu,  8 Nov 2001 06:56:20 -0800 (PST)
Received: from vpop.net (bilbo.vpop.net [63.231.252.113])
	by boromir.vpop.net (8.11.4/8.11.4) with ESMTP id fA8EuHR99236;
	Thu, 8 Nov 2001 06:56:18 -0800 (PST)
	(envelope-from mreimer@vpop.net)
Message-ID: <3BEA9D4E.83E069EB@vpop.net>
Date: Thu, 08 Nov 2001 08:57:18 -0600
From: Matthew Reimer <mreimer@vpop.net>
Organization: VPOP Technologies, Inc.
X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Re: KAME IPsec on low-end hardware
References: <lists.freebsd.security.20011108140840L.sakane@kame.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Does compression work with tunnels? If so, could you give an example SPD
that demonstrates this?

Thanks for all your ipsec work!

Matt

Shoichi Sakane wrote:
> 
> > I suspect that compression would also affect response times, but
> > omitting:
> >
> >   compression_algorithm deflate;
> >
> > from racoon.conf results in a parse error. Does anyone know if
> > compression can be disabled?
> 
> "compression_algorithm deflate;" is just a information.
> the compression algorithm would not be used when it was
> in the configuration file.  when you define ipcomp to the SPD, then
> the compression will be used.
> 
> > Also, is there much difference between racoon and isakmpd? AFAICT
> > isakmpd supports dymamic client IP addresses, but that seems to be the
> > only major difference.
> 
> racoon can do too.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message