Re: linux-ipsec: Freeswan: manual conns. and ipsec setup

> Is it possible/desirable to have manual connections come up and go down

Yes, adding a manual-setup-at-boot list to the config file is on my list. It does seem like it could have uses, especially for people who are doing something odd.

> I'm starting to wonder about the usefullness of having all packets without

This would be feasible, but it's not clear that it's desirable...

> That
> way, I can still send traffic to other places via the same SG in the clear

Why is traffic for those "other places" being routed to ipsec0, if it does not need IPSEC processing? It should simply be routed to the underlying interface, bypassing ipsec0 entirely. Neither pluto nor ipsec_manual creates a route to ipsec0 without an intent to process.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)