Re: linux-ipsec: replay and manual setup

-----BEGIN PGP SIGNED MESSAGE-----
> Richard Guy Briggs wrote:

No. This is wrong. It was removed in the latest code because it should not be necessary. Your ed->eme_flags additions/changes simply get it to ignore any replay window that was set. The easier solution is to accept and not override the default window size of '0'.

Mea culpa! On checking the code here, I found a bug in my recent replay enable/disable code. I have fixed it. Thanks for the test/observation. Fix checked in, snapshot imminent.

> now i can shut my gateways up and down and everything works fine.

There inherently is, with manual mode. This is well understood in the specs.

> > Just married! Not your traditional wedding chariot!

Thanks! I've had a number of people ask where they could rent such a vehicle. I don't know, I didn't rent it. I helped build it so they really couldn't say no...

> Christian Kagerhuber Deutsche Telekom Online Services GmbH

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

        slainte mhath, RGB
- --
Just married! Not your traditional wedding chariot!

        see:<http://conscoop.ottawa.on.ca/rgb/wedding.html>

Richard Guy Briggs -- PGP key available                Auto-Free Ottawa! Canada
rgb at conscoop dot ottawa dot on dot ca                <
http://flora.org/afo/>

"We left our footprints in the Earth
And punched a hole right through the sky" -- S.Hogarth/J.Helmer(Marillion)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNjq2St+sBuIhFagtAQEnXAQAkM7PiQb2leCilYdOrse7EcPPJC87EZx8 pWZoWmIvgON6QZUNC43f1e4U1cv7pR1oNVEsRpO4TPopnK9b59xuyMsJpuEpIkDj Q9tLsnioIyKVdd79jHrp3cQP/jxd9FOrbLRoWzzp1pGbgRKtLd9iZthaRG2+6N22 iKm1QP+J5R8=
=VJyx
-----END PGP SIGNATURE----- Received on Sat Oct 31 02:03:48 1998