Linux-kernel mailing list archive 1999-34,: Re: linux-ipsec: Re: tncfg+ifconfig adds a route under 2.2.x

# Re: linux-ipsec: Re: tncfg+ifconfig adds a route under 2.2.x

Henry Spencer (henry@spsystems.net)
Tue, 24 Aug 1999 10:57:09 -0400 (EDT)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Timothy Wood: "Re: "invalid character" problem with SMP and 2.3.3 (and newer)"
- Previous message: Alan Cox: "PATCH: [fix for] 2.3.14 continues to break perl with libc5 (or..)"

On Tue, 24 Aug 1999, Matthew G. Marsh wrote:
> > ...The more I beat my head on this stuff, the more it has
> > to go in favour of the ipchains/netfilter model... <shaking head>
>
> That would be preferred. One of the main problems I have with the
> FreeS/Wan model is the insistance on controlling the route table which is
> an incorrect way of approaching the problem.

We agree, but the re-engineering of FreeS/WAN to use ipfilter is going to
take time, and we'd hoped to do an interim release which would work with
the old mechanism. Doing that on the 2.2 kernels is proving unexpectedly
difficult.

(It's also not clear that switching to ipchains/ipfilter would solve all
of Richard's problems. He'd still have the problem of having to fragment
a packet because it has unexpectedly become too big. [Just cranking down
the MTU so that such packets do not get sent is not a viable answer, for
several reasons beyond our control.] However, the circumstances should be
less constraining.)

Henry Spencer
henry@spsystems.net
(henry@zoo.toronto.edu)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

- Next message: Timothy Wood: "Re: "invalid character" problem with SMP and 2.3.3 (and newer)"
- Previous message: Alan Cox: "PATCH: [fix for] 2.3.14 continues to break perl with libc5 (or..)"