NAT-T on current 8

[Scott Ullrich]

On Fri, May 29, 2009 at 5:41 PM, Giulio Ferro <auryn at zirakzigil.org> wrote:
> As far as I know the natt patch hasn't been included in the source tree yet.
> This fact notwithstanding, is there a patch I can download and apply
> manually? I need it rather badly...

There sure is.  bz@ sent this over for testing and we are using it in
pfSense..  Works great!

http://people.freebsd.org/~bz/20090523-04-natt.diff ... Please do
follow up with feedback after you deploy.

You will most likely also want the latest ipsec-tools cvs port + a few
patches that we are also testing in pfSense... works great!

http://cvs.pfsense.com/~sullrich/ipsec-tools-devel.zip ... This is a
port file of a recent ipsec-tools cvs checkout + a few patches
provided by vanhu@, extract to /usr/ports/security/ and make install.

The NATT patch is slated to hit the FreeBSD tree soon so please do
report back your findings.

Thanks,

Scott