Re: Big VPN

["Milan P. Stanic" <mps@rns-nis.co.yu>]

On Tue, Mar 02, 2004 at 03:37:52PM -0600, Jacques Normand wrote:
> On Tue, Mar 02, 2004 at 10:08:22PM +0100, J.H.M. Dassen (Ray) wrote:
> > If you're looking for a VPN solution, by all means look at FreeS/WAN (or its
> > likely successor, OpenSWAN). Just forget about OE. OE isn't about the type
> > of security you're looking for in a VPN.
> 
> And what about the ipsec system in the 2.6 kernel (KAME) and the racoon
> daemon for initial key exchange? It does the same work as freeswan but
> it is still developped..

FreeS/WAN is "orphaned" upstream. OpenSWAN is based on FreeS/WAN and as
such it does not work with 2.6.
I'm not sure but I think that Herbert Xu (Debian kernel maintainer)
added patches to pluto (FreeS/WAN IKE daemon) to work with IPSec in
the kernel 2.6.x

Racoon is in FreeBSD for few years and is actively developed.