David DeSimone wrote:
Stephen Clark <[EMAIL PROTECTED]> wrote:
switch (proto) {
case IPPROTO_GRE:
hlen += sizeof(struct gre_h);
+
+ m->m_flags &= ~(M_DECRYPTED);
+
Are there security implications from removing this flag?
That is a very good quest
Stephen Clark <[EMAIL PROTECTED]> wrote:
>
> switch (proto) {
> case IPPROTO_GRE:
> hlen += sizeof(struct gre_h);
> +
> + m->m_flags &= ~(M_DECRYPTED);
> +
Are there security implications from removing this flag?
--
David DeSimone == Network Admin ==
Bjoern A. Zeeb wrote:
On Mon, 17 Nov 2008, Stephen Clark wrote:
Hi,
Bjoern A. Zeeb wrote:
On Fri, 14 Nov 2008, Robert Noland wrote:
Hi,
Also just using gre's without the
underlying ipsec tunnels seems to
work properly.
The reason for this to my knowledge is:
http://www.kame.net/dev/cvswe
On Mon, 17 Nov 2008, Stephen Clark wrote:
Hi,
Bjoern A. Zeeb wrote:
On Fri, 14 Nov 2008, Robert Noland wrote:
Hi,
Also just using gre's without the
underlying ipsec tunnels seems to
work properly.
The reason for this to my knowledge is:
http://www.kame.net/dev/cvsweb2.cgi/kame/freebsd2/sy