From owner-freebsd-security Sat Mar 24 14:58:52 2001 Delivered-To: freebsd-security@freebsd.org Received: from starfruit.itojun.org (p205.usslc10.stsn.com [63.161.205.205]) by hub.freebsd.org (Postfix) with ESMTP id 2E7D237B719 for ; Sat, 24 Mar 2001 14:58:47 -0800 (PST) (envelope-from itojun@itojun.org) Received: from itojun.org (localhost [127.0.0.1]) by starfruit.itojun.org (Postfix) with ESMTP id 92CA07E73; Sun, 25 Mar 2001 07:58:35 +0900 (JST) To: Mike Harding Cc: freebsd-security@freebsd.org In-reply-to: mvh's message of Sat, 24 Mar 2001 11:23:33 PST. <20010324192333.9D2D5114069@netcom1.netcom.com> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: Re: IPSEC/VPN/NAT and filtering From: Jun-ichiro itojun Hagino Date: Sun, 25 Mar 2001 07:58:35 +0900 Message-Id: <20010324225835.92CA07E73@starfruit.itojun.org> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Okay, I think I know enough now to procede in making a doc on >interacting with a Cisco VPN, with a very minor kernel change. Can >anybody suggest who I should contact to determine if this makes sense, >and how I can coordinate with the FreeBSD team? why kernel change is needed to interoperate with specific implementation? anyway, contact kame guys, core@kame.net or snap-users@kame.net. >Also, Itojun, can you provide reference to 'scoped addresses' and >'strong host model node'? scoped addresses: IPv6 docs, like RFC2460, RFC2373, whatever. strong host model: RFC1122. itojun To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message