On Wednesday, 23. February 2005 18:02, Markus W Kilbinger wrote:
> >>>>> "Klaus" == Klaus Klein <kleink@mibh.de> writes:
> 
>     >> Feb 22 23:32:38 mogli racoon: INFO: @(#)ipsec-tools 0.6-base (http://ipsec-tools.sourceforge.net) 
>     >> Feb 22 23:32:38 mogli racoon: ERROR: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument 
> 
>     Klaus> In a nutshell, it was dealing with the absence of NAT-PT
>     Klaus> support from the kernel rather ungracefully. This is fixed
>     Klaus> now on the trunk.
> 
> Thanks for the info! I'm recompiling at the moment...
> 
> Is the absent kernel UDP_ENCAP_ESPINUDP* support something 'on its
> way' into netbsd?

It's already there as a kernel option; see IPSEC_NAT_T in options(4).


- Klaus

P.S. Obviously I meant NAT-T above, not NAT-PT.