Creating a "mail gateway"

[James Knott]

Lennart Sorensen wrote:
> Setting up openswan is generally very very simple.  It also handles all
> traffic types well and efficiently (no VPN should EVER use a tcp
> connection, so IPsec uses udp).
>   

I agree with this, though sometimes you may have to use TCP. OpenVPN 
supports both.
> Certainly with a pre shared key, IPsec is trivial.  With RSA keys, it's
> still pretty simple.  When using certificates, IPsec itself is pretty
> simple and nice, but generating certificates seems to be an awfully
> difficult task.
>
>   

I have also set up IPsec (on a router, not Linux) with preshared keys 
and it was not difficult.

-- 
Use OpenOffice.org <http://www.openoffice.org>
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists