April 2004
Intermediate to advanced
320 pages
9h 10m
English
Content preview from Network Security HacksBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Set Up IPsec Under Linux
Secure your traffic in Linux with FreeS/WAN.
The most popular way of configuring
IPsec connections
under Linux is to use the FreeS/WAN
(http://www.freeswan.org) package. FreeS/WAN
is made up of two components, KerneL IP Security (KLIPS)
and pluto.
KLIPS is the kernel-level code that actually encrypts and
decrypts the data; it also manages the Security Policy Database
(SPD).
pluto
is a user-land daemon that controls IKE negotiation.
The FreeS/WAN build process builds a new kernel
and the required management utilities. Download the latest
FreeS/WAN source from the
project’s web site and unpack the source tree in
/usr/src. The documentation that comes with
FreeS/WAN is very extensive and can help you
tailor the installation to suit your needs.
The kernel component can be either installed as a
kernel-loadable module or statically compiled directly into your
kernel. In order to compile FreeS/WAN, the
kernel source must be installed on your machine. During the
compilation process, the kernel configuration utility will launch.
This is normal. Compile FreeS/WAN using your
kernel configuration method of choice (such the menu-based or
X11-based options). Once the compilation is complete, install the
kernel and user-land tools per the FreeS/WAN
documentation (typically a make install will suffice).
FreeS/WAN configuration is controlled by two
configuration files: /etc/ipsec.conf and /etc/ipsec.secrets. The examples given in this hack are very limited in scope and ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.