In message: <20040727074246.GC3778@think.mailq.de>
            Mischa Diehm <md@mailq.de> writes:
: If he wants a solid and secure stack
: OpenBSD might be an option.

The security of the resulting port is only as good as the care that is
taken to properly take into account the differences between OpenBSD's
stack (say) and the target environment where things may be different
in a number of subtle (and not so subtle) ways.  Just because it came
from OpenBSD doesn't ensure that the end result will be any more or
less secure than if it was taken from other systems...

Maybe this is a silly suggestion, but he may want to check out the
KAME sources directly.  Often when kame is integrated into an OS, a
number of changes happen (including stripping out of needless
#ifdefs).  Going back to the KAME source may make the porting easier.
Some caution would be advised in that route, however, as there may be
bug fixes in *BSD that haven't been fully integrated back into the
KAME tree.  http://www.kame.net/

Warner