[ previous ] [ next ] [ threads ]
 From:  Christiaens Joachim <jchristi at oce dot be>
 To:  "'Manuel Kasper'" <mk at neon1 dot net>, cfs2 <cii633 at 21cn dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  RE: [m0n0wall] Re:[m0n0wall] Status report
 Date:  Fri, 31 Oct 2003 14:43:04 +0100
Maybe some kind of rebuilding the racoon.conf based on name-resolution each
time a connection is lost? I don't know if it is possible at all...


-----Original Message-----
From: Manuel Kasper [mailto:mk at neon1 dot net]
Sent: vrijdag 31 oktober 2003 14:38
To: cfs2
Cc: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] Re:[m0n0wall] Status report

On 31.10.2003, at 00:38, cfs2 wrote:

>       can add Dynamic DNS IPSec support in next m0n0wall?
>      the function is very important.when tow office connect internet 
> by ADSL
>     thank you very much!

If somebody can send me a working racoon.conf for DynDNS (or just to 
allow clients with dynamic IP addresses to connect, for that matter), 
it will be no big problem to integrate that feature into m0n0wall. 
However, at least the way I see it, racoon is a pretty limited and 
patchy program, unfortunately. We may be able to support it by 
including support for an "anonymous" sainfo/policy, but this of course 
means that all your dynamic IP clients will have to use the same 
pre-shared secret and other settings... it doesn't look like racoon can 
differentiate policies based on anything else than IP addresses. So 
this is not really a limitation in m0n0wall, but one in racoon. Which 
of course doesn't mean there can't be some kind of workaround for it.

- Manuel

To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch

Oce enables its customers to manage their documents efficiently and
effectively by offering innovative print and document management products
and services for professional environments.

This e-mail message and any attachment are intended for the sole use of the
recipient(s) named above and may contain information which is confidential
and/or protected by intellectual property rights.
Any use of the information contained herein (including, but not limited to,
total or partial reproduction, communication or distribution in any form) by
other persons than the designated recipient(s) is prohibited.

If you have received this e-mail in error, please notify the sender either
by telephone (0032-2-729.48.11) or by e-mail and delete the material from
any computer.
Oce-Belgium/Oce-Interservices is nor responsible for the correct and
complete transfer of the contents of the sent e-mail, neither for the
receipt on due time.  This e-mail message does not bring about a contractual
obligation for Oce-Belgium/Oce-Interservices.

Thank you for your cooperation.

For further information about Oce-Belgium/Oce-Interservices please see our
website at www.oce.be