Re: linux-ipsec: Pluto tripping over own feet

-----BEGIN PGP SIGNED MESSAGE-----
> > My first thought is that Pluto should be able to tell the kernel not

This is where we currently fail, but that will be much easier to deal with in 2.1.xxx.

> I don't think this is really so much a matter of routing. In the long

Exactly.

> I see two possible ways of dealing with this.

As long as specific routing is used for the peer host, then klips just makes an exception to udp/500. This seems simple to me. Incoming will not be affected for now. It is easy to implement now and easy to adapt for 2.1.xxx.

> The other is to kludge temporarily. I think the easiest way to do that is

Right.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

> Henry Spencer

        Slainte Mhath, rgb

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNZKgWt+sBuIhFagtAQGuFAP/QB+5HHhaG0P7S1iS/b0w2ZC8+ntsBelw uzDsCuiqcAwcGklC+O+dBE0AQiBBkR6sDcKfKlfEAGPIrKcxiAk87ulRfRDkdwze lC9rD+9mUH9g1e6So5e1NQK7m/OQkpwu4uKWnJn5+9Pnrvl38kKx5tOREyObRkMf 07SubBsv+84=
=62A8
-----END PGP SIGNATURE----- Received on Thu Jun 25 15:35:54 1998