On Mon, 11 Nov 2002, Simpson, Doug wrote: > I am using freeswan(IPSEC) so you will want to visit their web site, but > first check out this website and there are links there for freeswan and the > x509 patch - http://www.techwolf.com/RH72freeswan.html > <http://www.techwolf.com/RH72freeswan.html>
> Also check out the leaf project if you go the freeswan/ipsec route. They > have good docs on setting up ipsec.conf and ipsec.secrets. The freeswan web > site has many faqs and docs too. > There are many out there doing ipsec another is Nate Carlson for got his url > but I believe this page has it and more - http://www.strongsec.com/freeswan/ > <http://www.strongsec.com/freeswan/> > Lots of reading . . . > If you go the ipsec way I can send you my configs and give you more info > later. I am bit busy now - I am working on this IPSEC server and need to > get a working firewall on it to pass my ipsec. > Hope this helps, > Have fun, > Doug A couple of things to add to your post Doug. Visit the "alternate" freeswan site, http://www.freeswan.ca. There you'll find another package called Super-freeswan which includes along with the core freeswan, x509 certs capability, NAT traversal patches and two others. You can get 'em as source rpms and compile. Another indispensible tool is fwbuilder. A gui tool for building iptables (and interestingly, PIX too) rulesets for your firewall. http://www.fwbuilder.org. -- redhat-list mailing list unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
