Re: [m0n0wall-dev] Dead Peer Detection in OpenBSD's isakmpd (IPsec)

From:	Manuel Kasper <mk at neon1 dot net>
To:	Vincent Fleuranceau <vincent at bikost dot com>
Cc:	m0n0wall dash dev at lists dot m0n0 dot ch
Subject:	Re: [m0n0wall-dev] Dead Peer Detection in OpenBSD's isakmpd (IPsec)
Date:	Sun, 31 Oct 2004 19:59:51 +0100

On 31.10.2004 19:35 +0100, Vincent Fleuranceau wrote:

> FYI: OpenBSD 3.6 RELEASED
> 
> - New functionality:
>  o isakmpd(8) now supports NAT-traversal and Dead Peer Detection
>     (RFC 3706).
> 
> We can simply hope the racoon developpers' team will have the same
> idea...

I think there's even a version of racoon with NAT-T (for Linux?)
around. The problem is that NAT-T also needs kernel support, which
FreeBSD currently lacks. :( DPD might work, though.

- Manuel