From owner-freebsd-hackers@FreeBSD.ORG  Sat Nov 24 14:29:36 2007
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 75D5516A46C
	for <freebsd-hackers@freebsd.org>; Sat, 24 Nov 2007 14:29:36 +0000 (UTC)
	(envelope-from auryn@zirakzigil.org)
Received: from mail.giulioferro.it (mail.giulioferro.it [85.18.102.52])
	by mx1.freebsd.org (Postfix) with ESMTP id 3E0D613C4D1
	for <freebsd-hackers@freebsd.org>; Sat, 24 Nov 2007 14:29:36 +0000 (UTC)
	(envelope-from auryn@zirakzigil.org)
Received: from localhost (localhost [127.0.0.1])
	by mail.giulioferro.it (Postfix) with ESMTP id 88E0C33C42
	for <freebsd-hackers@freebsd.org>; Sat, 24 Nov 2007 15:13:31 +0100 (CET)
X-Virus-Scanned: amavisd-new at giulioferro.it
Received: from mail.giulioferro.it ([127.0.0.1])
	by localhost (aurynwork1sv1.giulioferro.it [127.0.0.1]) (amavisd-new,
	port 10024)
	with ESMTP id 9VX3-IlPeTKH for <freebsd-hackers@freebsd.org>;
	Sat, 24 Nov 2007 15:13:28 +0100 (CET)
Received: from aurynmob2.giulioferro.it (mail.zirakzigil.org [82.63.178.63])
	(Authenticated sender: gferro@giulioferro.it)
	by mail.giulioferro.it (Postfix) with ESMTP id 6D3E033C41
	for <freebsd-hackers@freebsd.org>; Sat, 24 Nov 2007 15:13:28 +0100 (CET)
Message-ID: <474830F9.90305@zirakzigil.org>
Date: Sat, 24 Nov 2007 15:11:05 +0100
From: Giulio Ferro <auryn@zirakzigil.org>
User-Agent: Thunderbird 2.0.0.5 (X11/20070724)
MIME-Version: 1.0
To: freebsd-hackers@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: doubt about IPSEC - Freebsd 7
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Nov 2007 14:29:36 -0000

I've noticed that in the kernel configuration IPSEC_ESP disappeared
from the options. It says that you just need device crypto and IPSEC.

Does this mean that with crypto and IPSEC I have all I need to treat
ESP like the old IPSEC_ESP option?

I'm having some problems right now setting up a vpn to complete phase 2,
(the error is no proposal chosen).
Since ipsec-tools uses the facilities in the kernel, I want to make sure 
that the
kernel provides everything racoon needs...