Re: Is it possible: IPsec tunnel with no static addresses?

2011-01-13 Thread Stuart Henderson
On 2011-01-01, Matt Evans m...@mattevans.org wrote: I've never seen an example where hostnames are used in place of static IP addresses in configuration files. Is it the case that anywhere I see an ip address (filenames, conf file values, etc), I could just as easily put in foo.dyndns.org?

Re: Is it possible: IPsec tunnel with no static addresses?

2011-01-02 Thread Ted Wynnychenko
Why do you think IPSec needs one fixed-IP endpoint? Certainly, things won't work if both of you change IP addresses before the DNS updates, but you seem to accept that. You can also get a fixed IP for free by contacting one of the IPv6 tunnel brokers. Yes, this will be IPv6-over-IPv4, which

Re: Is it possible: IPsec tunnel with no static addresses?

2011-01-01 Thread Joachim Schipper
On Fri, Dec 31, 2010 at 04:19:53PM -0600, Matt Evans wrote: A friend and I are both on dynamic IP residential broadband connections. We both use OpenBSD boxes as edge devices. We were wondering if it were possible to create an ipsec tunnel between us, even though we both have dynamic public

Re: Is it possible: IPsec tunnel with no static addresses?

2011-01-01 Thread Matt Evans
Why do you think IPSec needs one fixed-IP endpoint? Certainly, things won't work if both of you change IP addresses before the DNS updates, but you seem to accept that. You can also get a fixed IP for free by contacting one of the IPv6 tunnel brokers. Yes, this will be IPv6-over-IPv4, which

Is it possible: IPsec tunnel with no static addresses?

2010-12-31 Thread Matt Evans
A friend and I are both on dynamic IP residential broadband connections. We both use OpenBSD boxes as edge devices. We were wondering if it were possible to create an ipsec tunnel between us, even though we both have dynamic public IPs. The documentation I've read seems to suggest that at least