Re: linux-ipsec: IPSec Masquerade

-----BEGIN PGP SIGNED MESSAGE-----
> > Am I correct in thinking that it is technically possible to masquerade

Agreed.

> In tunnel mode, the ESP encryption hides everything, including the

This would be useful, but as I understand it, someone (HS?) has already looked into this and found that the switch for protocol is only two bits. Bletch!

> In transport mode, while ESP does not protect the addresses in the IP

I hadn't thought of this... The port numbers are very important for masquerading if there is to be more than one host at or behind the masquerading firewall using the protocol.

> That includes the port numbers. Worse, the major transport protocols --

You are correct, thanks for the correction (Actually, I don't think you had seen my post yet.).

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

> This is, I'm afraid, basically a feature, not a bug. Informally stated,

Agreed, and this is what we have done, with success.

> Henry Spencer

        slainte mhath, RGB
- --

Richard Guy Briggs -- PGP key available                Auto-Free Ottawa! Canada
rgb at conscoop dot ottawa dot on dot ca                <
http://flora.org/afo/>
<
http://conscoop.ottawa.on.ca/>           FreeS/WAN:<
http://flora.org/freeswan>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNp5d7t+sBuIhFagtAQGh+wP/R96ulShf+ab/F2M19BIMUsfcEGjZWza7 0lcRhieXXMNc+oaiy7Nk4Q5CdcMBd0DrEs7ifnxaeFWKdv6bk5UKMIvvYrs3Q1+V APRFtmLy6WF82Ds91lfiX0w0dB8B/DYa8V6vmO2AcpJ545ho553CNEWJTEPo3S6k ZFtR1HVA4y4=
=ilcd
-----END PGP SIGNATURE----- Received on Thu Jan 14 16:44:33 1999