From owner-freebsd-security@FreeBSD.ORG Wed May 18 07:44:58 2005 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7321716A4D1 for ; Wed, 18 May 2005 07:44:58 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.203]) by mx1.FreeBSD.org (Postfix) with ESMTP id D533343D78 for ; Wed, 18 May 2005 07:44:57 +0000 (GMT) (envelope-from jpriotti@gmail.com) Received: by rproxy.gmail.com with SMTP id i8so23725rne for ; Wed, 18 May 2005 00:44:57 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:from:to:references:subject:date:mime-version:content-type:content-transfer-encoding:x-priority:x-msmail-priority:x-mailer:x-mimeole; b=sxksDMXK+Jq4b8Tej+iscMW7b72ST5LboWB3U6wulRYlHNbWhhgWUptwl7LYrQcXg0IYMtGjtFuzPlbFhJEiilE8Ef6blFB8MAmidud5DSwEXAR2SQVVxwHXm4LotUDPu2d50k2d2/zUgTge1upV6pYG9Vob0t/82cKPeMfg/sI= Received: by 10.38.104.24 with SMTP id b24mr130920rnc; Wed, 18 May 2005 00:44:57 -0700 (PDT) Received: from pvy2m1gtzlxqq2x ([200.126.213.55]) by mx.gmail.com with ESMTP id 71sm74520rnb.2005.05.18.00.44.55; Wed, 18 May 2005 00:44:57 -0700 (PDT) Message-ID: <007701c55b7e$198216d0$37d57ec8@pvy2m1gtzlxqq2x> From: "Juan Priotti" To: "mohan chandra" , References: <20050518073122.21373.qmail@web8505.mail.in.yahoo.com> Date: Wed, 18 May 2005 04:48:35 -0300 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Subject: Re: HOW TO Enable IPSec for FreeBSD.......??? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2005 07:44:58 -0000 Have you tried this: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html it worked for me Juan ----- Original Mes sage ----- From: "mohan chandra" To: "Danil V. Gerun" ; ; ; Sent: Wednesday, May 18, 2005 4:31 AM Subject: Re: HOW TO Enable IPSec for FreeBSD.......??? > Hi Danil, > > Thanks to all for replying.. > > I executed (build) the kernel with hte propely > commands by changing the "GENERIC" with "MYKERNEL" at > the "ident" option. > > #commands used are > make buildkernel KERNCONF=MYKERNEL > make installkernel KERNCONF=MYKERNEL && reboot > > But still ipsec support is not there. If ipsec exists > the file ipsec.conf should be there under " /etc " > folder,but it is not there.. > > I found ' MYKERNEL ' folder under the following > directory: > > :/usr/obj/usr/src/sys/MYKERNEL > > It contains so many object files and C-header files, > In that ipsec.o, ipsec.h and other ipsec related file > like esp,ah etc., are appearing. > > So with this can I do anything to add ipsec, Please > reply me soon. > > Also I tried using 'setkey' to find the ipsec support > with following commands and I got the following > output: > ------------------------- > mohan# setkey -D > No SAD entries. > mohan# setkey -DP > No SPD entries. > mohan# > -------------------------- > > And atlast can I use any ipsec patches for FreeBSD. > So, please suggest me any sort of solution to get > ipsec on my FreeBSD (4.11) > > with Regards, > > Mohan.. > > > --- "Danil V. Gerun" wrote: > > mc> /usr/src/sys/i386/conf/MYKERNEL > > ... > > mc> # cd /usr/src > > mc> # make buildkernel KERNCONF=IPSEC && make > > mc> installkernel KERNCONF=IPSEC > > > > If this is what you've really done, then you should > > do > > > > make buildkernel KERNCONF=MYKERNEL > > make installkernel KERNCONF=MYKERNEL > > > > > > And you can also change the 'ident' option in the > > kernel to the > > ident MYKERNEL > > > > > > > > -- > > Best regards, Danil V. Gerun > > danil@hate.spam.625.ru > > > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to > > "freebsd-security-unsubscribe@freebsd.org" > > > > mohan chandra wrote: > > Hi, > > > > I have tried to enable IPSec support for my > > FreeBSD( 4.11-RELEASE) system. > > First, I copied the generic kernel configuration > file > > to a file I called MYKERNEL: > > > > #cp /usr/src/sys/i386/conf/GENERIC > > /usr/src/sys/i386/conf/MYKERNEL > > > > > > Then, I added the following three lines to the > options > > section of /usr/src/sys/i386/conf/MYKERNEL: > > > > options IPSEC > > options IPSEC_ESP > > options IPSEC_DEBUG > > > > After that I recompile the kernel with the following > > command: > > > > # cd /usr/src > > # make buildkernel KERNCONF=IPSEC && make > > installkernel KERNCONF=IPSEC > > > > And also installed IKE support on my system with the > > following command using racoon: > > > > cd /usr/ports/security/racoon > > make install clean > > > > Afterall completion of build, still IPSec support is > > not appearing in the system. Suggest me,is there any > > configuration or modifications need to be done? > > > > Please, anyone give me some suggestion to enable > IPSec > > support on FreeBSD. > > Any Help will be very much appeciated.. > > > > Thanx, > > > > Regards, > > Mohan.. > > ________________________________________________________________________ > Yahoo! India Matrimony: Find your life partner online > Go to: http://yahoo.shaadi.com/india-matrimony > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"