Debian Developers - Re: Freeswan in Debian, or: Why I am such a bad maintainer

Author

Re: Freeswan in Debian, or: Why I am such a bad maintainer

Florian Weimer

2004-07-12, 7:53 am

* Marc Haber:

> On Mon, Jun 28, 2004 at 03:06:29PM +0200, Wichert Akkerman wrote:
>
> Linux 2.6 ipsec sucks, because it makes packet filtering much harder
> and more complicated, and debugging nearly impossible because you
> don't see the unencrypted packet with tcpdump.

This model fits better to ESP Transport Mode, though.

Does anybody know if Transport Mode is here to stay (say, in
OpenSwan), or if it will go away? It's rather convenient because you
don't have to assign another set of IP addresses to all servers.

--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org