On Sun, May 20, 2001 at 12:59:43PM +0300, Miki Shapiro wrote:
> Another Q:
>
> I want my box to suggest (yet not require) IPSec over my IPv4 connection,
> especially for incoming sessions.
AFAIK, there isn't such thing as "suggesting". Using IPSec is basically
establishing a VPN tunnel with you (and possibly with your whole
subnet, if you wish to expose it). First, the hosts handshake and
exchange keys on port 500, then they can talk. For now, establishing
such a connection is a thing one does on purpose -- the kernel doesn't
automagically check if the other host has IPSec open.
> I have a custom-tailored 2.4.2 as it is, and I didn't find IPSec support
> in the config menu. I either missed something or...
No, IPSec isn't merged in, but is available from a project called
FreeS/WAN. http://www.freeswan.org
> Can anyone point it out to me?
> (I also really hope it's available as a module, I don't want to reset my
> uptime ... :-))
I'm afraid you'll need to patch the kernel and restart.
--
Best regards,
Ilya Konstantinov
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
