SuSE 8.2 und NAT-Traversal...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi There, has anyone tried to use NAT-T with SuSE 8.2???? They compiled the NAT-T support into freeS/WAN, but not into the kernel... well, that's ok for me but trying to patch the SuSE-provided kernel-sources turned out that in kernel-source-2.4.20.SuSE-62.rpm there is no support for IPSEC anywhere... that leaves me with a big ? What am I supposed to patch? According to /usr/share/doc/packages/freeswan/README.SuSE I should patch the kernel... nice but which one - a vanilla kernel, so that all the other nice patches SuSE has put into the kernel are gone and most stuff stops working... or the kernelbinaries... (I suppose not...) Any ideas? Would be soooooo cool if someone could help (I'm now getting into the n-th week of trying to get that VPN-stuff working properly - I think I could write a book about VPN by now...) 1000 thanks for any input that gets me closer to the solution and almost as many for the other answers ;))) Cheers, Arndt - -- Arndt Faulhaber mailto:arndt.faulhaber@diagnosdata.com gpg-pubkey: http://www.rzuser.uni-heidelberg.de/~afaulhab/arndt.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE+7JdEEin8GFiSP10RAgV5AJ43YX+K6l/v3fUTrwxpH0D5wuuGNACcCSs+ xNscvwEOD16fI6AFgz0ICIY= =3lmO -----END PGP SIGNATURE-----
Hi,
Your message triggered a question which came long ago to my
mind. Maybe someone can answer it here (hopefully :)
How can one get the exact SuSE kernel recompiled?
Imagine one has installed a SuSE Linux (whatever version), with
certain out-of-box kernel. Now I'd like to have the kernel
recompiled, without any changes. I want to get an identical copy
(in functionality, of course, not binary copy :) of the running
kernel. Which packages has one to install? What steps one has to
perform? How much different kernels shipped
(i386,i586,i686,athlon) differ?
I think this is a valid question, since if you need to
add/remove something to the running kernel, you're never sure
that the one change you made to the sources you had is actually
the one and only difference you'll get at the end.
Cheers
Ed
--- Arndt Faulhaber
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi There,
has anyone tried to use NAT-T with SuSE 8.2????
They compiled the NAT-T support into freeS/WAN, but not into the kernel... well, that's ok for me but trying to patch the SuSE-provided kernel-sources turned out that in
kernel-source-2.4.20.SuSE-62.rpm
there is no support for IPSEC anywhere...
that leaves me with a big ?
What am I supposed to patch? According to /usr/share/doc/packages/freeswan/README.SuSE I should patch the kernel... nice but which one - a vanilla kernel, so that all the other nice patches SuSE has put into the kernel are gone and most stuff stops working... or the kernelbinaries... (I suppose not...)
Any ideas? Would be soooooo cool if someone could help (I'm now getting into the n-th week of trying to get that VPN-stuff working properly - I think I could write a book about VPN by now...)
1000 thanks for any input that gets me closer to the solution and almost as many for the other answers ;)))
Cheers, Arndt
- -- Arndt Faulhaber mailto:arndt.faulhaber@diagnosdata.com gpg-pubkey: http://www.rzuser.uni-heidelberg.de/~afaulhab/arndt.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE+7JdEEin8GFiSP10RAgV5AJ43YX+K6l/v3fUTrwxpH0D5wuuGNACcCSs+
xNscvwEOD16fI6AFgz0ICIY= =3lmO -----END PGP SIGNATURE-----
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
__________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
On Mon, Jun 16, 2003 at 06:14:09AM -0700, Eduard Avetisyan wrote:
Hi,
Your message triggered a question which came long ago to my mind. Maybe someone can answer it here (hopefully :)
How can one get the exact SuSE kernel recompiled?
install SuSE-kernel-sources, make cloneconfig make menuconfig -> here you can change the setting you need to change. make cloneconfig reads the contents of /proc/config.gz and configures the kernel according to the settings of the running kernel regards, Stefan -- Stefan Seyfried, Senior Consultant community4you GmbH Chemnitz, Germany
Eduard Avetisyan wrote:
Your message triggered a question which came long ago to my mind. Maybe someone can answer it here (hopefully :)
How can one get the exact SuSE kernel recompiled?
I don't know if i'm answered your question but... "zcat /proc/config.gz > /usr/src/linux/.config.startup" (or whatever path you want to save your actually running kernel) -- TYCTYCTYCTYCTYCTYCTYCTYCTYCTYCTYCTYC J.J.Gallardo - Dpto. Sistemas mailto:juancho@tyc.es Tecnologia y Consulting S.A. c/Capitan Haya 55 semisotano 28020 Madrid http://www.tyc.es TYCTYCTYCTYCTYCTYCTYCTYCTYCTYCTYCTYC
Hello, if you want to use your own freeswan-version, you have to make at least the kernel modules for freeswan. There are targets to do this in fs' makefile. for example: 'make oldmod' I have a very brief description for installing super-freeswan on SuSE. Please read: http://m1b.de/content/know/opensource/freeswan/ Super-FreeSWan SOURCE RPM for SuSE Linux ≥ 7.3 (see section: "Compile & Install Kernel modules:") I do it the suse-way and build a separate rpm for the kernel-module feedback is always appreciated! regards, Reinhard Am Sonntag, 15. Juni 2003 17:56 schrieb Arndt Faulhaber:
Hi There,
has anyone tried to use NAT-T with SuSE 8.2????
They compiled the NAT-T support into freeS/WAN, but not into the kernel... well, that's ok for me but trying to patch the SuSE-provided kernel-sources turned out that in
kernel-source-2.4.20.SuSE-62.rpm
there is no support for IPSEC anywhere...
that leaves me with a big ?
What am I supposed to patch? According to /usr/share/doc/packages/freeswan/README.SuSE I should patch the kernel... nice but which one - a vanilla kernel, so that all the other nice patches SuSE has put into the kernel are gone and most stuff stops working... or the kernelbinaries... (I suppose not...)
Any ideas? Would be soooooo cool if someone could help (I'm now getting into the n-th week of trying to get that VPN-stuff working properly - I think I could write a book about VPN by now...)
1000 thanks for any input that gets me closer to the solution and almost as many for the other answers ;)))
Cheers, Arndt
-- Arndt Faulhaber mailto:arndt.faulhaber@diagnosdata.com gpg-pubkey: http://www.rzuser.uni-heidelberg.de/~afaulhab/arndt.asc
-- Reinhard Moosauer IT Beratung
participants (5)
-
Arndt Faulhaber -
Eduard Avetisyan -
J.J. Gallardo -
Reinhard Moosauer -
Stefan Seyfried