Orchid XP v8 wrote:
> I thought I saw somewhere that OpenVPN *does* work with NAT, but IPSec 
> doesn't. (Because NAT involves packet modification, which IPSec is 
> obviously designed to prevent.)

No, what they said was that if you want IPSec to work with NAT, you had 
to exclude the IP addresses from the hash calculation with a 
configuration. Since OpenVPN never even offers the opportunity to 
include the IP addresses, it's "simpler" and therefore more secure.

Huh?

-- 
Darren New / San Diego, CA, USA (PST)
  Helpful housekeeping hints:
   Check your feather pillows for holes
    before putting them in the washing machine.

Post a reply to this message