Re: linux-ipsec: Notes from _trying_ to install & configure Linux FreeS/WAN...

-----BEGIN PGP SIGNED MESSAGE-----
> On Thu, 26 Nov 1998, Richard Guy Briggs wrote:
> > > > I'm thinking the nexthop parameter should disappear and the automatic I/F

Ok, but this is why I suggested setting up an IPIP tunnel first to test it. Then the policy eroute could come up immediately.

> Sure, *sometimes* there will be an existing route which can be copied.
> But sometimes not; I can't depend on it. And I definitely can't insist
> that the user always create one.

Ok, so how about making it optional for those that are weirdos, like tunnelling to reserved subnets and extruded subnets where people have a better idea of what they are trying to do.

> > > Actually, you can verify this easily enough with a stock tcpdump -- if the

True, however this only tests ICMP packets, and takes up much more vertical space.

> Henry Spencer

        slainte mhath, RGB
- --

Richard Guy Briggs -- PGP key available                Auto-Free Ottawa! Canada
rgb at conscoop dot ottawa dot on dot ca                <
http://flora.org/afo/>

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNl7JP9+sBuIhFagtAQELvQP+P8KLXiEQTCYYvj7cOaVvQlCbEhBVsHYO CMAKr9A1YkxAXd7TtGvVgjuaE3a23pHBW/EV3VNHDY3wVBRIqNVU9OolufASBoXW ODDdKkZTJ0qJ3pgGGXp0JB2O0RjFZpPYWW8kgca+S5xKl4f9rbi9MmI5gAC/3CxZ 2MbunUgSy+I=
=zrEo
-----END PGP SIGNATURE----- Received on Fri Nov 27 11:27:05 1998