Messages in this thread | | | Date | Tue, 24 Aug 1999 10:57:09 -0400 (EDT) | From | Henry Spencer <> | Subject | Re: linux-ipsec: Re: tncfg+ifconfig adds a route under 2.2.x |
| |
On Tue, 24 Aug 1999, Matthew G. Marsh wrote: > > ...The more I beat my head on this stuff, the more it has > > to go in favour of the ipchains/netfilter model... <shaking head> > > That would be preferred. One of the main problems I have with the > FreeS/Wan model is the insistance on controlling the route table which is > an incorrect way of approaching the problem.
We agree, but the re-engineering of FreeS/WAN to use ipfilter is going to take time, and we'd hoped to do an interim release which would work with the old mechanism. Doing that on the 2.2 kernels is proving unexpectedly difficult.
(It's also not clear that switching to ipchains/ipfilter would solve all of Richard's problems. He'd still have the problem of having to fragment a packet because it has unexpectedly become too big. [Just cranking down the MTU so that such packets do not get sent is not a viable answer, for several reasons beyond our control.] However, the circumstances should be less constraining.)
Henry Spencer henry@spsystems.net (henry@zoo.toronto.edu)
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |