Re: linux-ipsec: Notes from _trying_ to install & configure Linux FreeS/WAN...

> > If the purpose of the gateway is to protect packets coming from a subnet,

A security gateway, by definition, relays packets on behalf of other hosts. While a single machine may function as both a security gateway and an originator of connections, those are two *different* roles, and are properly addressed separately. (Also, SGs -- like firewalls -- are security-sensitive machines which should themselves be as secure as possible, i.e. no interactive users.)

> Also, my testbed only has two machines ;-(

That does limit what you can test. It's not an accident that RGB and I each have four. :-)

> > It's possible (at least manually, not sure about automatic keying for this

It's on our to-do list; it should be possible soon.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)