|
From: <hzu...@ra...> - 2003-12-10 13:58:16
|
On 12/09/2003 07:13:30 PM Martin Glazer wrote: >> We have anyway the following task outstanding: either move to >> SuperFreeS/WAN ( http://www.freeswan.ca ) or to FreeS/WAN 2.0x >> When I asked last time, nobody answered which one is prefered. >> > >I haven't worked with FreeS/WAN 2.0x yet, so I'm unsure of all the >changes. >One major difference is the use of a method called OE (Opportunistic >Encryption), which they are promoting heavily, as a method of >automagically >encrypting all traffic between 2 Linux boxes without prearrangement. To >me, >the jury is still out on whether this will actually be adopted by any >other >vendors, but I may be wrong. I'm also unsure of the state of the ALG >patches, >NAT traversal, X509 certs, etc in the official 2 release. > >On the otherhand, I have worked quite extensively with SuperFreeS/WAN, >and so >I would recommend this be the route to follow. It has all the patches >currently in DL now as well as a few others. The DL ipsec patchset is >also >currently a patch or 2 behind. It looks like SuperFreeS/WAN is also >working >on a V2 version, but haven't quite got the official release there yet. I successfully replaced FreeS/WAN with Super-FreeS/WAN and it compiles just fine. I'll check in the updates next week, when I'm back from vacation (probably Sunday). Heiko |