From owner-freebsd-security Sat Mar 24 15:19:36 2001 Delivered-To: freebsd-security@freebsd.org Received: from peter3.wemm.org (c1315225-a.plstn1.sfba.home.com [65.0.135.147]) by hub.freebsd.org (Postfix) with ESMTP id 7783F37B718 for ; Sat, 24 Mar 2001 15:19:30 -0800 (PST) (envelope-from peter@netplex.com.au) Received: from mobile.wemm.org (mobile.wemm.org [10.0.0.5]) by peter3.wemm.org (8.11.0/8.11.0) with ESMTP id f2ONJRp11065 for ; Sat, 24 Mar 2001 15:19:27 -0800 (PST) (envelope-from peter@netplex.com.au) Received: from netplex.com.au (localhost [127.0.0.1]) by mobile.wemm.org (8.11.1/8.11.1) with ESMTP id f2ONJRh03313 for ; Sat, 24 Mar 2001 15:19:27 -0800 (PST) (envelope-from peter@netplex.com.au) Message-Id: <200103242319.f2ONJRh03313@mobile.wemm.org> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: freebsd-security@FreeBSD.ORG Subject: Re: IPSEC: racoon and Win2K In-Reply-To: <39F078A4FCEC5D408C23FC3D92DEE4020162BC@tyr.kinsman.lan> Date: Sat, 24 Mar 2001 15:19:27 -0800 From: Peter Wemm Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org "Peter Wemm" wrote: > "oldfart@gtonet" wrote: > > OK, now I see it's majordomo, can someone fix it? > > No, I think it was lists@mentisworks.com.. Have a look at the headers. > They have an exploder there, and one of their clients was looping. > (lists@kinsman.org). > > I have unsubscribed them and we'll see if it stops.. I was expecting this loop because I cc:'ed the suspect address with the mail. Hopefully there will not be a duplicate of this one. > > OF > > > > > -----Original Message----- > > > From: owner-freebsd-security@FreeBSD.ORG > > > [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of oldfart@gtonet > > > Sent: Saturday, March 24, 2001 1:43 PM > > > To: freebsd-security@FreeBSD.ORG > > > Subject: RE: IPSEC: racoon and Win2K > > > > > > > > > You've posted the same message 9 times, please stop. Somebody will help > > > IF/when they can. > > > > > > OF > > > > > > > -----Original Message----- > > > > From: owner-freebsd-security@FreeBSD.ORG > > > > [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Jorge Peixoto > > > > Vasquez > > > > Sent: Saturday, March 24, 2001 1:33 PM > > > > To: freebsd-security@FreeBSD.ORG > > > > Subject: IPSEC: racoon and Win2K > > > > > > > > > > > > I've read the mini-howto on how to setup IPSEC on the FreeBSD > > > > (http://asherah.dyndns.org/~josh/ipsec-howto.txt) and have been most > > > > succesful so far. > > > > > > > > I would be very glad if anyone could help me on the following matter: > > > > > > > > The only problem I've encountered is that, when making Win2K and FreeBS D > > > > interoperate, the IKE's phase 2 only suceeds if > > > > Win2K initiates the process. If racoon is to start it, Win2k will not > > > > accept any proposal for phase 2, complaining that the dh group number > > > > (which should correctly be either 1 or 2) received is 1 or 2 (depending > > > > on the pfs_group setting in racoon.conf) and not null(0). If I try > > > > setting pfs_group to null, I get a parse error. > > > > > > > > All the docs I found in the kame site (www.kame.net), the handbook, and > > > > the man pages haven't been of any help too. > > > > > > > > Thank you very much for your attention, > > > > > > > > Sincerely, > > > > > > > > jOrge > > > > > > > > p.s. I am using FreeBSD 4.2-Stable, racoon 20001111a and (YES) I got th e > > > > high-encryption pack and SP1 installed on the Win2K box. > > > > -- > > > > Jorge Peixoto Vasquez, Elet. Eng. > > > > Aker Security Solutions > > > > tel. +55 - 61 - 340 9083 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-security" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > Cheers, > -Peter > -- > Peter Wemm - peter@FreeBSD.org; peter@yahoo-inc.com; peter@netplex.com.au > "All of this is for nothing if we don't go to the stars" - JMS/B5 > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > Cheers, -Peter -- Peter Wemm - peter@FreeBSD.org; peter@yahoo-inc.com; peter@netplex.com.au "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message