From owner-freebsd-current@FreeBSD.ORG Mon Aug 9 14:11:05 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7811716A4CE for ; Mon, 9 Aug 2004 14:11:05 +0000 (GMT) Received: from mailout01.sul.t-online.com (mailout01.sul.t-online.com [194.25.134.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id D7DE743D3F for ; Mon, 9 Aug 2004 14:11:04 +0000 (GMT) (envelope-from Alexander@Leidinger.net) Received: from fwd04.aul.t-online.de by mailout01.sul.t-online.com with smtp id 1BuArf-0004Ce-03; Mon, 09 Aug 2004 16:11:03 +0200 Received: from Andro-Beta.Leidinger.net (TJWSq6ZcreHPcCiBM6VbbpFxFQyQE-1u5u4B14q+F+aXR7sRm5lks9@[217.229.208.124]) by fmrl04.sul.t-online.com with esmtp id 1BuArQ-1AWEgS0; Mon, 9 Aug 2004 16:10:48 +0200 Received: from Magellan.Leidinger.net (Magellan.Leidinger.net [192.168.1.1]) i79EAr05043000; Mon, 9 Aug 2004 16:10:53 +0200 (CEST) (envelope-from Alexander@Leidinger.net) Date: Mon, 9 Aug 2004 16:11:37 +0200 From: Alexander Leidinger To: "Bjoern A. Zeeb" Message-Id: <20040809161137.0bab2d07@Magellan.Leidinger.net> In-Reply-To: References: <200408080622.i786Mnhe017474@www1.pochta.ru> <20040808132524.GB1033@mehnert.org> <20040808155623.2fa6fb4b@Magellan.Leidinger.net> <20040809112700.GB659@mehnert.org> <20040809150754.13ca108a@Magellan.Leidinger.net> <20040809153341.24963cfd@Magellan.Leidinger.net> X-Mailer: Sylpheed-Claws 0.9.12 (GTK+ 1.2.10; i386-portbld-freebsd5.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-ID: TJWSq6ZcreHPcCiBM6VbbpFxFQyQE-1u5u4B14q+F+aXR7sRm5lks9@t-dialin.net cc: FreeBSD current mailing list Subject: Re: IPSec + 5.2.current Problem X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Aug 2004 14:11:05 -0000 On Mon, 9 Aug 2004 13:45:52 +0000 (UTC) "Bjoern A. Zeeb" wrote: > On Mon, 9 Aug 2004, Alexander Leidinger wrote: > > > On Mon, 9 Aug 2004 13:21:01 +0000 (UTC) > > "Bjoern A. Zeeb" wrote: > > > > > > > I also had some problems with IPSEC and IPSEC_ESP, changing require > > > > > to use in the policies fixed that. With require racoon was not able > > > > > to initiate phase 1, because all non esp traffic was dropped. > > > > > > whyever I hadn't seen this posting. > > > > Did you noticed Message-Id: > > <20040805223027.7df0732b@Magellan.Leidinger.net> on -current? > > I had seen that mail but I cannot see this paragraph in there. anyway.. It's another thread without any discussion. > > > > I think this is a datapoint... I use a "require" policy too. ATM I can't > > > > test with "use" instead. > > > > > > but this problem had been fixed months ago for IPSEC. > > > > Any other idea for the cause of the observed behavior? > > which on ? use vs. require ? I think this is just not HEAD. In my case it's -current from Jul 18. > your problem: do you really need gif(4) ? if yes - what for ? In my case the problem doesn't matter, since using FAST_IPSEC works for me. But I think it should be fixed for 5.3. As you can see in the above mentioned mail, I converted a 4.x system to -current. On 4.x I've used gif for a tunnel (as documented in the handbook) between the FreeBSD system and a VPN appliance which isn't under my control. Is there another way to setup a tunnel in -current? Bye, Alexander. -- I'm available to get hired (preferred in .lu). http://www.Leidinger.net Alexander @ Leidinger.net GPG fingerprint = C518 BC70 E67F 143F BE91 3365 79E2 9C60 B006 3FE7