securing 6bone tunnels

[James Housley]

Jun-ichiro itojun Hagino wrote:
> 
<<snip>> 
>         to avoid attacks, I would like to encourage 6bone tunnel operators
>         to establish IPv4 transport-mode AH (or IPv6-over-IPv4 tunnel
>         mode AH) relationship with your peer.  how to do this is implementation
>         dependent.  for KAME-based platforms, you'd need to get the latest
>         KAME tree from ftp://ftp.kame.net/pub/kame/snap/ (*BSD releases
>         do not have enough policy checking code).
> 

What is the oldest SNAP that has the required policy checking?

Jim
-- 
/"\   ASCII Ribbon Campaign  .
\ / - NO HTML/RTF in e-mail  .
 X  - NO Word docs in e-mail .
/ \ -----------------------------------------------------------------
jeh@FreeBSD.org      http://www.FreeBSD.org     The Power to Serve
jim@TheHousleys.Net  http://www.TheHousleys.net
---------------------------------------------------------------------
"It's a damn poor mind that can only think of one way to
spell a word."
    -- -Andrew Jackson