Uhmm, could you explain that? What's wrong with FreeS/Wan?
It's not integrated with the kernel, it's a set of patches/etc. With OpenBSD/Solaris/Windows2000/other modern OS's it's integrated by default. The basic design is kind of messy. Try setting it up from scratch and you'll see what I mean. All I gotta do in OpenBSD/etc is enable the IPSec related key daemons and config connections, nothing messy. FreeSWAN is making leaps and bounds though, but another issue is the lack of support for network cards with built in crypto accelerators (like intel's server nic's), OpenBSD/Windows support these.
I hope FreeS/Wan is part of the SuSE distribution so this mail isn't too far off-topic... ;-)
Yeah they ship freeswan.
Regards,
Jan Hildebrandt
Hmm, maybe SuSE should pay me to answer these =) Kurt Seifried SecurityPortal, your focal point for security on the net http://www.securityportal.com/