Re: Cipe configuration error

Thankyou for your replies and this discussion.
Relevant to this, I have also been in contact with
Hans Steegers who is the developer of cipex.
He has kindly supplied me with a patched version
of cipe (and cipex) which installs cleanly under 2.6.18.
So I no longer have a problem.
He has also indicated that he has patches for
2.6.19. The patched files are

cipex-1.6.0-0.70 (2.6.18)
cipe-1.60-StE-3  (2.6.18)
cipex-1.6.0-0.71 (2.6.19)
cipe-1.6.0.-StE-4 (2.6.19)

Regards,
Roger.

....................................................................................

On Thu, 04 Jan 2007 02:00:46 +0100
Joachim Otahal <[email protected]> wrote:

> Stephan von Krawczynski wrote:
> > Please Karl, stop that. If you like OpenVPN more please go and read/write
> > their mailing-list.
> >   
> auch besser die Finger von cipe lassen, hat Security Probelme by design, 
> (ab jetzt auf englisch:)
> 
> The Problem with cipe is that the developer themself gave up the project 
> since cipe has no real reason to continue, OpenVPN is more simple in 
> config, uses existing kernel modules (tun/tap modules), and the link is 
> more reliable. On top of that OpenVPN does not have "by design" 
> weaknesses like the cipe protocol has. OpenVPN uses some parts of 
> cipe-win for its Windows driver code stuff.
> Check http://openvpn.net/static.html the config is sooo simple, I just 
> suggest to add the line 'cipher AES-256-CBC'. Server and client side 
> linux/windows mix is no problem, even mac osx clients exist.
> 
> You are free to continue developing cipe to work with the latest 2.4 and 
> 2.6 kernels if you want to, cipe is somewhat dead since last code update 
> was January 2002 (see http://sites.inka.de/bigred/devel/cipe.html and  
> http://sourceforge.net/project/showfiles.php?group_id=66201 ).
> 
> The most common OpenVPN start problems are: forgotten tun/tap kernel 
> modules in kernel (no prob in debian and other newer distros, just 
> modprobe tun) and missing /dev/net/tun device. For the latter mkdir 
> /dev/net and mknod /dev/net/tun c 10 200 should be sufficient (needed 
> for the six years old RedHat Linux 7.1 as example).
> 
> IMHO Olaf Titz should give some big notes on the cipe homepage and the 
> sourceforge-dl page that cipe will not be continued by him, since this 
> mailing list ONLY wakes up due to allways the same reason, cipe in newer 
> kernels/distros.
> 
> kind regards,
> 
> Joachim Otahal
> 
> > Roger:
> > what does "uname -r" say?
> >
> > Regards,
> > Stephan
> >
> > --
> > Message sent by the [email protected] mailing list.
> > Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
> > Other commands available with "help" in body to the same address.
> > CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>
> >
> >
> >   
> 
> 
> --
> Message sent by the [email protected] mailing list.
> Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
> Other commands available with "help" in body to the same address.
> CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>
> 
> This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
> 


-- 
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Dr. Roger Young
Industrial Research Ltd             Telephone: 64-4-5690-247
Applied Mathematics                 Fax:       64-4-5690-003        
P O Box 31-310, Lower Hutt	    Internet:  [email protected]
New Zealand.                       
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.


--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>