[Design] Freeswan design & implementation?

HI,

I would like to ask two things in my mail.

First,I am looking for the layer architechure of FreeS/WAN (IPSEC) implementation; because i donot have at the moment a clear view that either the FreeS/WAn implemented is above IP or Under IP layer.

Secondly, I want to have a view for implementing an idea in exsisting Freeswan code.

1)The idea is to extend FreeS/WAN code in such a way that, while checking the SPD entries if it founds a specific entry (for example a specific destination address )then it calls another method(My_SEND_method) to do a (different security Manipulation), rest of the traffic will processed by the FreeS/WAN Implementation. so my question is where in the code this SPD is being read so that i can capture the entry for which i am looking for and then call my_SEND_method.This will result in , two mechanism working together in one Running code (freeswan code). For the receiver point of view i want to know where the SPI is checked in freeS/WAN code, becasue on a specific SPI i would like to call my method again for receiving(my_REC_method) otherwise freeS/WAN code will hanldle it.

2) While running together if some body wants to have only my_method running, and he wants that IKE should not run or vice virsa. Where to StOP the IKE in FREESWAN code.or if some body want to rerun it while running my_method. and vice virsa.

It is something like a stop and start switch for IKE implementation and my_method. Resulting in seamless combination of freeS/WAN and MY_method.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

This implementation can be though of like having 2 mechanism for Security operating in parallel or alone in a single FreeS/WAn CODE.

Please Guide me to the way....

Anticipating some suggesstions.

Aoun Raza.