Hi,

I'm currently trying to install an IPSec package in our 2.2.8 FreeBSD boxes and I chose the Kame version.

I downloaded the file kame-1999131-fbsd228-stable.tgz and followed all the instructions contained in the kit/INSTALL. I applied the patch: patch -p1 -f < $SOMEWHERE/kit/sys-228.diff and then edit the IP6 conf file maintaining the option IPSEC.

'make depend' produces many warnings, all of the same kind, like:

../../netid/in.h:355: warning: IP_ESP_TRANS_LEVEL redefined ../../netid/in.h:351: this is the location of the previous definition

These warnings appear for several #define macro name like IP_ESP_NETWORK_LEVEL, IPSEC_LEVEL_BYPASS, etc. This is normal (and wrong I guess) because the #ifdef IPSEC clause contains a second definition for all these macros without putting them in #else. Then the make depend exits with the 'Error code 1'.

Beeing a stable release, I guess I missed something. I've noticed that at www.kame.net there is an include-1999131-fbsd228-stable.tgz: should I include this one too? If yes, where to explode the tar file?

We would like to have IPSec for the IPv4 stack, somewhere on the mailing lists I read it's sufficient ot mask the option "INET6". Is that enough? (Btw the errors I got are with the above option in)

Tia Jerome

To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message