[Openswan Users] Connection not coming up automatically

[Paul Wouters]

On Tue, 27 Jun 2006, Andy wrote:

> > Is this safe to set nhelpers=0 on all osw boxes?
> IMO, yes.
> I run all mine that way.

Yes it is indeed.

> I'm really not sure how the separate helper process is useful.

It prevents your box from going down with a trivial DDOS attack when
Aggressive Mode is used. It is also used for async hardware offloading.

There are definately issues with nhelpers being non-zero.

Paul