sorry, this should go to ports@

On Fri, Sep 14, 2007 at 01:47:35AM +0200, Thomas Schoeller wrote:

quoted text
> here is a updated port with all my suggestions included.

>

>

>

> On Thu, Sep 13, 2007 at 04:46:37PM +0200, Thomas Schoeller wrote:

> > hello,

> >

> > runs fine for me on macppc and i386 against a Cisco Systems, Inc./VPN

> > 3000 Concentrator Version 4.1.7.Q

> >

> > suggestions:

> > 	- remove .orig files

> > 	- install a sample split tunnel script

> > split.sh:

> > #!/bin/sh

> > # this effectively disables changes to /etc/resolv.conf

> > INTERNAL_IP4_DNS=

> >

> > # This sets up split networking regardless

> > # of the concentrators specifications.

> > # You can add as many routes as you want,

> > # but you must set the counter $CISCO_SPLIT_INC

> > # accordingly

> > CISCO_SPLIT_INC=1

> > CISCO_SPLIT_INC_0_ADDR=10.0.0.0

> > CISCO_SPLIT_INC_0_MASK=255.255.0.0

> > CISCO_SPLIT_INC_0_MASKLEN=16

> > CISCO_SPLIT_INC_0_PROTOCOL=0

> > CISCO_SPLIT_INC_0_SPORT=0

> > CISCO_SPLIT_INC_0_DPORT=0

> >

> > . /etc/vpnc/vpnc-script

> >

> > 	- patch against vpnc-script that not existing routes get not

> > 	  removed(prevents error messages in split tunnel mode). but i do

> > 	  know how to check if a route exists which handle "special" netmask

> > 	  because route/netstat shows routes in cidr notation.

> >

> > tomorrow i will see if dead peer detection and rekeying works.

> >

> > thomas

> >

> > On Wed, Sep 12, 2007 at 09:47:08PM -0500, Aaron Hsu wrote:

> > > The compressed archive of the port is available at

> > >

> > >

> > >

> > >

> > > --

> > > ((name "Aaron Hsu")

> > >  (email/xmpp "arcfide@sacrificumdeo.net")

> > >  (phone "703-597-7656")

> > >  (site "http://www.aaronhsu.com"))

>

> [demime 1.01d removed an attachment of type application/x-tar-gz]