On Sat, 19 Apr 2003, waynej at dccmn.com wrote:
> One of the issues I had was my old ISP insisted that I run my cisco in
> router mode and my Freeswan doesn't like that so I had to switch ISPs to
> get bridge support.  In router mode, your outside IP address <> your
> eth0 IP address cause it's doing NAT.  Freeswan sees this is a
> man-in-middle attack.

Just buy a routed subnet; then you'll have real public IP's without having 
to do bridging.

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list