From owner-freebsd-doc@FreeBSD.ORG Tue Jun 12 15:50:40 2007 Return-Path: X-Original-To: doc@freebsd.org Delivered-To: freebsd-doc@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7A0A216A46B; Tue, 12 Jun 2007 15:50:40 +0000 (UTC) (envelope-from marc@blackend.org) Received: from abigail.blackend.org (ns0.blackend.org [82.227.222.164]) by mx1.freebsd.org (Postfix) with ESMTP id F2B4F13C469; Tue, 12 Jun 2007 15:50:39 +0000 (UTC) (envelope-from marc@blackend.org) Received: from gothic.blackend.org (gothic.blackend.org [192.168.1.203]) by abigail.blackend.org (8.13.4/8.13.3) with ESMTP id l5CFocli055641; Tue, 12 Jun 2007 17:50:38 +0200 (CEST) (envelope-from marc@abigail.blackend.org) Received: from gothic.blackend.org (localhost.blackend.org [127.0.0.1]) by gothic.blackend.org (8.14.1/8.13.8) with ESMTP id l5CFobHj045091; Tue, 12 Jun 2007 17:50:37 +0200 (CEST) (envelope-from marc@gothic.blackend.org) Received: (from marc@localhost) by gothic.blackend.org (8.14.1/8.13.8/Submit) id l5CFobv4045090; Tue, 12 Jun 2007 17:50:37 +0200 (CEST) (envelope-from marc) Date: Tue, 12 Jun 2007 17:50:37 +0200 From: Marc Fonvieille To: Poul-Henning Kamp Message-ID: <20070612155037.GB995@gothic.blackend.org> References: <20070612142932.GA995@gothic.blackend.org> <42160.1181659618@critter.freebsd.dk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42160.1181659618@critter.freebsd.dk> X-Useless-Header: blackend.org X-Operating-System: FreeBSD 6.2-STABLE User-Agent: Mutt/1.5.15 (2007-04-06) Cc: gnn@freebsd.org, doc@freebsd.org Subject: Re: HOWTO setup a simple IPSEC tunnel X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2007 15:50:40 -0000 On Tue, Jun 12, 2007 at 02:46:58PM +0000, Poul-Henning Kamp wrote: > In message <20070612142932.GA995@gothic.blackend.org>, Marc Fonvieille writes: > > >Interesting. One should look how this can be used with > >http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html > >(which I suspect to contain wrong/outdated infos). > > I am not going to be a judge on the political correct way to > use IPSEC, but the stuff in the handbook at the very least needs > a significant update. > > A general tendency in all examples of how to set up IPsec that > I found, seems to be that people don't actually understand how > it works, so the blindly copy examples and set options to > their default settings etc. > I think the current Handbook IPsec section is "frightening" (too much information, etc.) for the newbie. A section based on your howto may be a better alternative. -- Marc