General

Profile

Lars Pedersen

Issues

Activity

04/05/2019

03:21 AM pfSense Bug #9455 (Rejected): Disable fetching of bogon tables when not used
If all interfaces has "Block bogon networks" unticked I would expect that periodic fetching of bogon tables was not n...

04/17/2018

07:05 AM pfSense Feature #4688: Missing TFC Traffic Flow Confidentiality support
Jim Pingle wrote:
> The IPsec stack in FreeBSD was overhauled between FreeBSD 10.x and FreeBSD 11.1, so it's possibl...

12/19/2017

04:14 AM pfSense Feature #8168: strongswan dhcp option
Lars Pedersen wrote:
> Would be nice to have the dhcp plugin for strongswan in pfsense. This feature could be useful...

12/06/2017

03:16 PM pfSense Feature #8168: strongswan dhcp option
Ges Ture wrote:
> I've asked for this 3 versions ago :)
Did you create a feature request for it or did you just w...

12/05/2017

03:17 PM pfSense Feature #8168 (New): strongswan dhcp option
Would be nice to have the dhcp plugin for strongswan in pfsense. This feature could be useful for a simple way to ass...

02/01/2017

05:51 AM pfSense Bug #6624: changes in IPsec config should down the connection
As a sidenote: When using IPsec mobile clients with PSK keys it would be preferred not to take the entire IPsec servi...

12/12/2016

08:13 AM pfSense Bug #7005 (Resolved): IPsec mss clamping not working for mobile clients
Doesn't look that mss-clamping is working on a IPsec mobile client setup.
1) In IPSec -> Advanced Settings -> Ena...

07/19/2016

04:27 AM pfSense Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
Confirmed that it works with IKEv2 PSK mobile client using:
ike = aes256gcm128-sha512-ecp512bp!
esp = aes256gcm...

07/18/2016

03:46 AM pfSense Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
Chris Buechler wrote:
> fix pushed
Looks good. Will verify it when the next snapshot is being build.

05/12/2016

08:39 AM pfSense Bug #5990: AES-GCM should be an allowed encryption algorithm for IKEv2 in P1
Took the initiative and asked the strongswan mailing list if the AES-GCM was supported in IKEv2. The response is in t...

Also available in: Atom