From owner-freebsd-net@FreeBSD.ORG Thu Oct 29 18:06:33 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4CE151065676 for ; Thu, 29 Oct 2009 18:06:33 +0000 (UTC) (envelope-from AStultz@datatekcorp.com) Received: from datatekcorp.com (h-68-167-242-186.nycmny83.static.covad.net [68.167.242.186]) by mx1.freebsd.org (Postfix) with ESMTP id 01CDA8FC1E for ; Thu, 29 Oct 2009 18:06:32 +0000 (UTC) X-MDAV-Processed: datatekcorp.com, Thu, 29 Oct 2009 13:51:38 -0400 Received: from AStultz08 by datatekcorp.com (Cipher TLSv1:RC4-MD5:128) (MDaemon PRO v10.0.4) with ESMTP id md50000251071.msg for ; Thu, 29 Oct 2009 13:51:37 -0400 X-Spam-Processed: datatekcorp.com, Thu, 29 Oct 2009 13:51:37 -0400 (not processed: message from valid local sender) X-MDOP-RefID: str=0001.0A090209.4AE9D627.01B2,ss=1,fgs=0 (_st=1 _vt=0 _iwf=0) X-Return-Path: AStultz@datatekcorp.com X-Envelope-From: AStultz@datatekcorp.com X-MDaemon-Deliver-To: freebsd-net@freebsd.org From: "Alan Stultz" To: Date: Thu, 29 Oct 2009 13:53:41 -0400 Message-ID: <00de01ca58c0$c0471710$ae01a8c0@datatekcorp.com> MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 11 x-mimeole: Produced By Microsoft MimeOLE V6.00.2900.3350 Thread-Index: AcpYwMAG8lF1DfgmTYqkRLGbTrIjTw== Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: IPsec v3 question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2009 18:06:33 -0000 Hello All: I have a question about the implementation of IPsec version 3 in FreeBSD. We are porting from FreeBSD 5.4 to 7.2 and currently run an IPv6 application with IPsec version 2 and IKEv1 open source from the KAME group. Since the KAME group disbanded (around when 5.4 was released), I don't know what RFCs for IPsec and IPv6 are currently implemented in various FreeBSD releases. I'm most interested in the following: RFC4301 - Security Arch. for the Internet Protocol RFC4302 - IP Authentication Header RFC4303 - IP ESP RFC4308 - Cryptographic Suites for IPsec If anyone has a list or knowledge of the latest IPv6 RFCs supported in FreeBSD, I would appreciate any info on them. Thanks in advance, Alan