To get things back on track, I am asking whether cipe or freeswan have problems with Fedora, not whether comcast might, sometime in the future, forbid VPN. The info on comcast was to clarify motivation and application. The infoworld article about comcast and VPN restrictions that mylist@xxxxxxx quotes is 3.5 years old, while the comcast FAQ permitting VPN that toddb@xxxxxxxxxxxxx quotes is current. In most of the Portland area (unfortunately not in this particular suburb) Comcast is competing with DSL, serving many customers working for large and opinionated companies like Intel, and dealing with a somewhat anti-corporate Oregon Public Utilities Commission. If Comcast pulls shenanigans in Oregon, they are likely to have their Oregon network seized in a court battle. In fact, it may well be that their national TOS was liberalized in response to legal challenges to the ATT merger brought by the Oregon PUC (they were nearly forbidden to merge here, and though small, we are a dense, important market). In other states, YMMV. But again, my question is not about what comcast *might* do - a lot of things *might* happen (in which case, I bury my VPN in a https stream to a "website" on my colo, or even use steganography). My question was about cipe versus freeswan versus other, in the specific context of Fedora. I have to choose a protocol, and I would rather avoid wasting resources on something that is hard to get working. Anyone have any answers to this? If you want to debate the comcast issue, please change the subject line, thank you. Keith -- Keith Lofstrom keithl@xxxxxxxx Voice (503)-520-1993 KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon" Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs