About:
Linux FreeS/WAN provides IPSEC (IP Security, which is both encryption and authentication) kernel extensions and an IKE (Internet Key Exchange, keying and encrypted routing daemon) as well as various rc scripts and documentation. It is known to interoperate with other IPSEC and IKE system already deployed by other vendors such as OpenBSD, Cisco, or CheckPoint. It also features Opportunistic Encryption, subnet extrusion, and with the appropriate patches interops nicely with Microsoft Windows XP/2000 using X.509 certificates.

Author:
The Free/SWAN project <info __at__ freeswan __dot__ org> [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.06/10.00 (5 votes)

Homepage:
http://www.freeswan.org/
Tar/GZ:
ftp://ftp.xs4all.nl/pub/crypto/freeswan/
Tar/BZ2:
ftp://ftp.xs4all.nl/[..]pub/crypto/freeswan/freeswan-2.06.tar.gz
RPM package:
ftp://ftp.xs4all.nl/[..]pub/crypto/freeswan/binaries/RedHat-RPMs
Mailing list archive:
https://lists.freeswan.org/

Trove categories: [change]

[Environment]		No Input/Output (Daemon)
[Intended Audience]		End Users/Desktop, System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX :: Linux
[Topic]		System :: Networking :: Firewalls, System :: Operating System Kernels :: Linux

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	2.06	23-Aug-2004	GNU General Public License (GPL)
SuperFreeSwan A version with additional third party patches	1.99.8	09-Oct-2003	GNU General Public License (GPL)

 Articles referencing this project

• SuSE: New ipsec-tools, freeswan, openswan packages fix remote denial of service
  by Patrick Lenz , in Security
  Tue, Dec 20th 2005 02:52
  
• Debian: New Free/SWan packages fix denial of service
  by Patrick Lenz , in Security
  Mon, Dec 2nd 2002 07:45
  
• Linux Routers: A Primer For Network Administrators
  by Jon Lasser , in Book Reviews
  Sat, Oct 26th 2002 00:00
  

 Comments

[»] Intersting project, but poorly organized and overly-complex install
by danbeck - Sep 6th 2002 16:46:16

The FreeS/WAN project group seems to be poorly organized. At the time of this comment, their website hadn't been updated since mid February; version information on the site was three versions behind and their online documention links did not work.

The install process is overly complex, forcing people to use their special and sparsely documented Makefile to patch and recompile your kernel. Excuse me, but I don't need to recompile my kernel, I only need to recompile the appropriate modules. After some serious searching, I was able to figure out how I could only make and install the modules themselves, but that was still broken, failing to copy the appropriate *.o files to my /lib/modules directories.

What ever happend to giving us sysadmins a patch and allowing us to make our own choices and decisions?

[reply] [top]