Hosting Provided By

Re: linux-ipsec: /etc/sysconfig/ipsec (limited usefulness?)

From: Henry Spencer <henry(at)spsystems.net>
Date: Wed Oct 07 1998 - 17:23:04 EDT

> 1) /etc/sysconfig/ipsec seems to assume that there is only going to

The last. In fact, the very latest snapshot -- cut about an hour ago -- includes a new "ipsec auto" command (modelled after "ipsec manual") as a quick first cut at providing control for multi-tunnel setup. Work is underway on some changes to Pluto which will improve its controllability, and that may affect the user interface, so "ipsec auto" is very much tentative and experimental right now, but it does at least avoid the configuration-file limit of a single tunnel.

> 1b) does my status as a us citizen living in the us make it so that

Unfortunately, yes. By all means report bugs, but fixes have to come from non-US-citizens outside the US. (We have access to lawyers if we really need an opinion on a doubtful case, but I don't think there is much doubt here... especially since we want our code to be unquestionably clean, not just arguably clean.)

> 2) I notice that pluto/constants.h lists some min/max values for the

Hugh Redelmeier, our Pluto guru, may wish to comment... but at the moment, it is probably safe to assume that they are arbitrary numbers arrived at in some haste. There are many things in Pluto which need to be made more configurable than they are at present. Issues like lifetime limits are quite sensitive to customer requirements and preferences.

> About 4 months ago I mentioned that I would soon be able to try testing

Yes, please! Even if the news is bad, it lets us know what needs fixing.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)

Received on Wed Oct 7 18:40:08 1998

Do you need help?

This message: [ Message body ]
Next message: Henry Spencer: "Re: linux-ipsec: Tested the IPsec client against Bay Contivity ?"
Previous message: Ron Snyder: "linux-ipsec: initial timestep results"
In reply to Ron Snyder: "linux-ipsec: /etc/sysconfig/ipsec (limited usefulness?)"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 12:59:03 EDT