On Sat, Jan 05, 2002 at 09:21:03PM +1100, Howard Lowndes wrote: > It makes sense to me that that should work, after all it uses the DNS to > get the KEY record so why not the A record, but it is not valid. > > I was wondering if opportunistic keying might be the answer, but apart > from having difficulty understanding it, I am not sure if it is what I > want anyway.
I think this is what you want. Have a read of the opportunism.howto.gz that comes with the freeswan docs. -- John http://www.inodes.org/ -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
