From owner-freebsd-current@FreeBSD.ORG Fri Sep 24 23:42:53 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A5DE216A4CE for ; Fri, 24 Sep 2004 23:42:53 +0000 (GMT) Received: from beagle2.mehnert.org (beagle2.mehnert.org [212.42.235.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id C376843D49 for ; Fri, 24 Sep 2004 23:42:52 +0000 (GMT) (envelope-from hannes@mehnert.org) Received: from localhost (port-212-202-0-243.dynamic.qsc.de [212.202.0.243]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "Hannes Mehnert", Issuer "mehnert root CA" (verified OK)) by beagle2.mehnert.org (Postfix) with ESMTP id 9BE329585D for ; Sat, 25 Sep 2004 01:42:50 +0200 (CEST) Date: Sat, 25 Sep 2004 01:43:32 +0200 From: Hannes Mehnert To: freebsd-current@freebsd.org Message-ID: <20040924234332.GB5307@mehnert.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Subject: 5.3 IPSEC broken X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Sep 2004 23:42:53 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, in 5.3-BETA5 IPSec is broken. A workaround is to set options MSIZE=512 in your kernel config. This should imho be default for GENERIC in 5.3. You still have to build a kernel with IPSEC and IPSEC_ESP to use IPSec. Why is IPSec not enabled in GENERIC kernel? Best Regards, Hannes Mehnert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQFBVLEhRcuNlziBjRwRAovdAKCE3iotumk/tRDu5htZq9hM9irLbQCgyKKD jdW+UXSWCZF6ApSUcHKQeBE= =dL9V -----END PGP SIGNATURE-----