Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 04 Feb 2004 22:19:33 +1100
From:      Andrew Thomson <andrewjt@applecomm.net>
To:        Guido van Rooij <guido@gvr.org>
Cc:        current@freebsd.org
Subject:   Re: ipsec changes in 5.2R
Message-ID:  <1075893572.29017.1.camel@oblivion>
In-Reply-To: <20040203155309.GA22676@gvr.gvr.org>
References:  <1074650025.701.82.camel@itouch-1011.prv.au.itouchnet.net> <20040122110929.GA767@gvr.gvr.org> <20040203070435.GB46486@blossom.cjclark.org> <20040203155309.GA22676@gvr.gvr.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks, that worked a treat for me too.. everything back to normal!

So what's the go with this fast_ipsec business. Is this going to be the
main implementation for Freebsd?

thanks for the tip,

ajt.

On Tue, 2004-02-03 at 16:53 +0100, Guido van Rooij wrote:
> On Mon, Feb 02, 2004 at 11:04:36PM -0800, Crist J. Clark wrote:
> > > I have seen the same. Somehow it looks like ISAKMP traffic, which used to
> > > go around the ipsec policy, is now included. The only workaround I know
> > > of is to replace "require" with "use".
> > 
> > A little late on this, but FAST_IPSEC rather than KAME IPsec will fix
> > the problem.
> 
> Thanks! That helped!
> 
> -Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1075893572.29017.1.camel>