|
|||||||||||
|
[Design] Freeswan design & implementation ?
From: AOUN RAZA <osraza(at)yahoo.com>
Date: Mon Feb 17 2003 - 15:59:27 EST HI, I would like to ask two things in my mail. First,I am looking for the layer architechure of FreeS/WAN (IPSEC) implementation; because i donot have at the moment a clear view that either the FreeS/WAn implemented is above IP or Under IP layer. Secondly, I want to have a view for implementing an idea in exsisting Freeswan code. 1)The idea is to extend FreeS/WAN code in such a way that, while checking the SPD entries if it founds a specific entry (for example a specific destination address )then it calls another method(My_SEND_method) to do a (different security Manipulation), rest of the traffic will processed by the FreeS/WAN Implementation. so my question is where in the code this SPD is being read so that i can capture the entry for which i am looking for and then call my_SEND_method.This will result in , two mechanism working together in one Running code (freeswan code). For the receiver point of view i want to know where the SPI is checked in freeS/WAN code, becasue on a specific SPI i would like to call my method again for receiving(my_REC_method) otherwise freeS/WAN code will hanldle it. 2) While running together if some body wants to have only my_method running, and he wants that IKE should not run or vice virsa. Where to
StOP the IKE in FREESWAN code.
This implementation can be though of like having 2 mechanism for Security operating in parallel or alone in a single FreeS/WAn CODE. Please Guide me to the way.... Syed Aoun Raza. Student MS(IT) University of Stuttgart. Ph: +49-179-1833720 Stuttgart, Germany. Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day Design mailing list Design@lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/design Received on Mon Feb 17 16:45:17 2003 This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 12:59:32 EDT |
||||||||||
|
|||||||||||