Re: [gentoo-user] IPsec

2021-04-06 Thread Grant Taylor
Pre-Script: I'm probably in a bad mental state to reply, but I want to answer some valid questions before others reply. Please take what I say and how I say it with a grain of salt. I don't mean anything personally. I /do/ appreciate the constructive and thought provoking responses that

Re: [gentoo-user] IPsec

2021-04-06 Thread antlists
On 06/04/2021 20:07, Sid Spry wrote: If you control everything you can use wireguard or OpenVPN. https://lwn.net/Articles/850098/ Salutory reading ... Cheers, Wol

Re: [gentoo-user] IPsec

2021-04-06 Thread Sid Spry
On Tue, Apr 6, 2021, at 10:35 AM, Grant Taylor wrote: > But I've started to get some more experience using IPsec without IKE > recently. > Can you clarify why you need to use IPsec? If it is to support a commercial client you may be better off handing them a system based around BSD. More

Re: [gentoo-user] IPsec

2021-04-06 Thread Grant Taylor
On 4/6/21 8:09 AM, J. Roeleveld wrote: I only managed to get it working between off-the-shelve devices, but would prefer to do it from Linux. That's where some of my experience is; SOHO routers, 15+ years ago. I think I did manage to get FreeS/WAN (at the time) to establish a VPN with one

Re: [gentoo-user] IPsec

2021-04-06 Thread J. Roeleveld
On Monday, April 5, 2021 3:46:37 AM CEST Grant Taylor wrote: > Hi, > > Does anyone have any experience with IPsec? Preferably on Gentoo or > Linux in general? > > I'd like to discuss some things (probably off list) while wading into > the IPsec pool. E.g.: > > - ip xfrm ... > - strongSwan

[gentoo-user] IPsec

2021-04-04 Thread Grant Taylor
Hi, Does anyone have any experience with IPsec? Preferably on Gentoo or Linux in general? I'd like to discuss some things (probably off list) while wading into the IPsec pool. E.g.: - ip xfrm ... - strongSwan - Libraswan - X.509 certificate based authentication, preferably /mutual/

[gentoo-user] ipsec-tools-0.7.3 fails to build

2009-11-07 Thread Mick
Like so: i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec - D_GNU_SOURCE -include ./src/include-glibc/glibc-bugs.h -I./src/include-glibc - I./src/include-glibc -I./../../src/racoon/missing -D_GNU_SOURCE -include ../../src/include-glibc/glibc-bugs.h -I../../src/include-glibc -

Re: [gentoo-user] ipsec-tools-0.7.3 fails to build

2009-11-07 Thread alex ponomarev
On Sat, Nov 7, 2009 at 8:10 PM, Mick michaelkintz...@gmail.com wrote: Like so: i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec - D_GNU_SOURCE -include ./src/include-glibc/glibc-bugs.h -I./src/include-glibc - I./src/include-glibc -I./../../src/racoon/missing

Re: [gentoo-user] ipsec-tools-0.7.3 fails to build

2009-11-07 Thread Mick
On Saturday 07 November 2009 17:16:48 alex ponomarev wrote: On Sat, Nov 7, 2009 at 8:10 PM, Mick michaelkintz...@gmail.com wrote: Like so: i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec - D_GNU_SOURCE -include ./src/include-glibc/glibc-bugs.h -I./src/include-glibc -

Re: [gentoo-user] ipsec-tools-0.7.3 fails to build

2009-11-07 Thread Daniel Pielmeier
Mick schrieb am 07.11.2009 18:10: Like so: i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec - D_GNU_SOURCE -include ./src/include-glibc/glibc-bugs.h -I./src/include-glibc - I./src/include-glibc -I./../../src/racoon/missing -D_GNU_SOURCE -include

Re: [gentoo-user] ipsec-tools-0.7.3 fails to build

2009-11-07 Thread Mick
On Saturday 07 November 2009 18:30:16 Daniel Pielmeier wrote: Mick schrieb am 07.11.2009 18:10: Like so: i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec - D_GNU_SOURCE -include ./src/include-glibc/glibc-bugs.h -I./src/include-glibc - I./src/include-glibc

Re: [gentoo-user] Ipsec with openswan consult...

2005-07-17 Thread A. Khattri
On Sat, 16 Jul 2005, Walter Willis wrote: # ipsec verify Checking your system to see if IPsec got installed and started correctly: Version check and ipsec on-path [OK] Linux Openswan U2.3.1/K2.6.12-gentoo (netkey) Checking for IPsec support in kernel

[gentoo-user] Ipsec with openswan consult...

2005-07-16 Thread Walter Willis
i have gentoo 2005 with genkernel 2.6.12-gentoo and install openswan 2.3.1 , the 3 interface network. finish install and configure #rc-update add ipsec default and reboot (it is not nessesary) verify my installation and look two lines the No such file or directory. # ipsec verify Checking