Problems with NAT on gif interface for VPN

[Brooks Davis]

On Tue, Nov 02, 2004 at 01:40:27PM +0100, Jeremie Le Hen wrote:
> > Yep, that seems to be exactly what I need. I don't suppose there are
> > any plans to implement something similar in FreeBSD anytime soon?
> > Considering I'm so close to getting this to work it's frustrating to
> > think that I would need to migrate to OpenBSD to have this
> > functionality and uproot everything else this server already does
> > (mail, dns, web, etc).
> 
> Considering if_enc.c from OpenBSD's HEAD (see URLs at the bottom), it
> does not seem to be difficult to port to FreeBSD, but since I'm not a
> kernel guru at all, there may be some issues I don't even suspect.o
> 
> I'm concious that making it FreeBSD's SMP compliant should require a
> little amount of work, but it could be maked with the IFF_NEEDSGIANT
> flag for a first step.  Are there any reason why we would not need nor
> want this in FreeBSD ?

I think the KAME people had some sort of objection to one of it's
features, but as long as it's not running by default I can't see how it
matters.  I don't think we should allow new drivers with IFF_NEEDSGIANT
into the tree.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20041104/d4634ce4/attachment.bin