Skip site navigation (1)Skip section navigation (2) 
Date:      Sat, 2 Mar 2002 20:13:39 -0500
From:      "John Hines" <bigjohn_101@hotmail.com>
To:        <freebsd-security@freebsd.org>
Subject:   trying to set up PGPNet
Message-ID:  <OE49MsUo27AzAtzkv2w000097d0@hotmail.com>
next in thread | raw e-mail | index | archive | help 

[-- Attachment #1 --]
Hello,

 I'm looking for help/documentation to set up a remote vpn client (PGPNet) to connect to my internal network behind a FreeBSD fw.  I've been able to set up a vpn between two FreeBSD firewalls, but I'm unable to find any docs on how to have a remote PC connect to my internal net's using PGPNet.     
    I assume the setup for PGPNet would be similar to setting up a vpn between two FreeBSD firewalls.  This is my current network topology:

    
                                                           External Interface

                                                                 X.X.X.X

                                                                       |

       +--> Remote PC <--> Internet <--> FreeBSD GW 

       |                                                                |

     Cable Modem  Y.Y.Y.Y                   192.168.1.0/24

      Win98 box                                          Internal Nets





I'm assuming that I need to add a line to my psk.txt file with the IP Y.Y.Y.Y and a password abc123.  I'm also assuming that my raccoon.conf file will not need to change.  Would this be the correct way to set up my kame-bsd.sh script to run the setkey tool?



#!/bin/sh
#
# IP addresses
#
#     External Interface                    External Interface
#               1.2.3.4                 5.6.7.8
#                      |                    |
#        +--> Firewall-1 <--> Internet <--> FreeBSD GW <--+
#        |                                                |
#       172.16.1.0/24                           192.168.0.0/24
#       FW-1 Protected Nets                     Internal Nets
#
setkey -FP
setkey -F
# Configure the Policy
setkey -c << END
spdadd 192.168.1.0/24 Y.Y.Y.Y/32 any -P out ipsec
esp/tunnel/X.X.X.X-Y.Y.Y.Y/require;
spdadd Y.Y.Y.Y 192.168.1.0/24 any -P in ipsec
esp/tunnel/Y.Y.Y.Y-X.X.X.X;


Also would this be the correct way add the gif funnel?
ifconfig gif0 create

gifconfig gif0 inet X.X.X.X Y.Y.Y.Y

ifconfig gif0 inet 192.168.1.1 Y.Y.Y.Y 255.255.255.0



Is there anything I missed?



Thanks in advance,



John Hines





 








[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2713.1100" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>Hello,</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;I'm looking for help/documentation to set up a remote vpn client 
(PGPNet) to connect to my internal network behind a FreeBSD fw.&nbsp; I've been 
able to set up a vpn between two FreeBSD firewalls, but I'm unable to find any 
docs on how to have a remote PC connect to my internal net's using PGPNet. 
&nbsp;&nbsp;&nbsp; </DIV>
<DIV>&nbsp;&nbsp;&nbsp; I assume the setup for PGPNet would be similar to 
setting up a vpn between two FreeBSD firewalls.&nbsp; This is my current network 
topology:</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;&nbsp;&nbsp; 
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 
</SPAN><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>External Interface<?xml:namespace prefix = o ns = 
"urn:schemas-microsoft-com:office:office" /><o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 2">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>X.X.X.X</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>|<o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>+--&gt;&nbsp;Remote PC&nbsp;&lt;--&gt; Internet &lt;--&gt; FreeBSD GW 
</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN>|<SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 
</SPAN>|<o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Cable Modem&nbsp; 
Y.Y.Y.Y</SPAN><SPAN style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 2">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;</SPAN>192.168.1.0/24<o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Win98 
box&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 2">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><SPAN 
style="mso-tab-count: 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN>&nbsp;&nbsp; Internal Nets</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>I'm assuming 
that I need to add a line to my psk.txt file with the IP Y.Y.Y.Y and a password 
abc123.&nbsp; I'm also assuming that my raccoon.conf file will not need to 
change.&nbsp; Would this be the correct way to set up my kame-bsd.sh script to 
run the setkey tool?</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3>#!/bin/sh<BR>#<BR># IP addresses<BR>#<BR>#&nbsp;&nbsp;&nbsp;&nbsp; 
External 
Interface&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
External 
Interface<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
1.2.3.4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
5.6.7.8<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
|<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +--&gt; Firewall-1 &lt;--&gt; 
Internet &lt;--&gt; FreeBSD GW 
&lt;--+<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
|<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
172.16.1.0/24&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
192.168.0.0/24<BR>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FW-1 Protected 
Nets&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
Internal Nets<BR>#<BR>setkey -FP<BR>setkey -F<BR># Configure the 
Policy<BR>setkey -c &lt;&lt; END<BR>spdadd 192.168.1.0/24&nbsp;Y.Y.Y.Y/32 any -P 
out ipsec<BR>esp/tunnel/X.X.X.X-Y.Y.Y.Y/require;<BR>spdadd&nbsp;Y.Y.Y.Y 
192.168.1.0/24 any -P in 
ipsec<BR>esp/tunnel/Y.Y.Y.Y-X.X.X.X;</FONT></SPAN></P><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN></DIV>
<DIV><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN>&nbsp;</DIV>
<DIV><SPAN style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>Also 
would this be the correct way add the gif funnel?</FONT></SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'">
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>ifconfig gif0 
create<o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>gifconfig gif0 
inet&nbsp;X.X.X.X Y.Y.Y.Y</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>ifconfig gif0 
inet 192.168.1.1&nbsp;Y.Y.Y.Y 255.255.255.0</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3></FONT></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>Is there 
anything I missed?</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3></FONT></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>Thanks in 
advance,</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3></FONT></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT size=3>John 
Hines</FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3></FONT></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"></SPAN>&nbsp;</P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><FONT 
size=3>&nbsp;<o:p></o:p></FONT></SPAN></P>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; mso-layout-grid-align: none"><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'"><o:p><FONT 
size=3></FONT></o:p></SPAN>&nbsp;</P></SPAN></DIV>
<DIV><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 9pt; FONT-FAMILY: 'Andale Mono'">&nbsp;</DIV>
<P class=MsoNormal 
style="MARGIN: 0in 0in 0pt; mso-pagination: none; tab-stops: 0in 47.95pt 95.9pt 143.85pt 191.8pt 239.75pt 287.7pt 335.65pt 383.6pt 431.55pt; mso-layout-grid-align: none"><FONT 
face="Times New Roman"><BR></FONT></P></SPAN></FONT></BODY></HTML>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OE49MsUo27AzAtzkv2w000097d0>