On Sun, Jun 22, 2003 at 09:34:40PM +1000, herbert wrote: > > I've also applied the 2.5 IPsec patch on top of Super-FreeSWAN 2.00rc4. > This means that you can now access all the crypto algorithms in Linux > via the usual esp= setting. I'm still working on NAT-T support. DPD > and shunt route scanning is pending on a kernel patch. I've just succeeded in having NAT-T going between two SFS machines both with the 2.5 IPsec patch applied. The only things that needed to be changed were a next payload bug in main R2 and a byte order problem in kernel_netlink.c. You can get the patch from: http://gondor.apana.org.au/~herbert/freeswan/sfs-linux-ipsec-20030627.patch.gz Cheers, -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html