here is a updated port with all my suggestions included.
On Thu, Sep 13, 2007 at 04:46:37PM +0200, Thomas Schoeller wrote:

quoted text
> hello,

>

> runs fine for me on macppc and i386 against a Cisco Systems, Inc./VPN

> 3000 Concentrator Version 4.1.7.Q

>

> suggestions:

> 	- remove .orig files

> 	- install a sample split tunnel script

> split.sh:

> #!/bin/sh

> # this effectively disables changes to /etc/resolv.conf

> INTERNAL_IP4_DNS=

>

> # This sets up split networking regardless

> # of the concentrators specifications.

> # You can add as many routes as you want,

> # but you must set the counter $CISCO_SPLIT_INC

> # accordingly

> CISCO_SPLIT_INC=1

> CISCO_SPLIT_INC_0_ADDR=10.0.0.0

> CISCO_SPLIT_INC_0_MASK=255.255.0.0

> CISCO_SPLIT_INC_0_MASKLEN=16

> CISCO_SPLIT_INC_0_PROTOCOL=0

> CISCO_SPLIT_INC_0_SPORT=0

> CISCO_SPLIT_INC_0_DPORT=0

>

> . /etc/vpnc/vpnc-script

>

> 	- patch against vpnc-script that not existing routes get not

> 	  removed(prevents error messages in split tunnel mode). but i do

> 	  know how to check if a route exists which handle "special" netmask

> 	  because route/netstat shows routes in cidr notation.

>

> tomorrow i will see if dead peer detection and rekeying works.

>

> thomas

>

> On Wed, Sep 12, 2007 at 09:47:08PM -0500, Aaron Hsu wrote:

> > The compressed archive of the port is available at

> >

> >

> >

> >

> > --

> > ((name "Aaron Hsu")

> >  (email/xmpp "arcfide@sacrificumdeo.net")

> >  (phone "703-597-7656")

> >  (site "http://www.aaronhsu.com"))

[demime 1.01d removed an attachment of type application/x-tar-gz]