KOVACS Krisztian wrote:
Hi,
On Friday 05 August 2005 12.50, Patrick McHardy wrote:
Is there already userspace code which uses this feature somewhere?
AFAIK Ulrich has a patch for OpenSWAN, and we (Balabit) have a patch
for racoon. Unfortunately this racoon version is available onl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
KOVACS Krisztian wrote:
> Ulrich, I already have some code which supports per-state
> difference settings, along with optional time limits. I don't know
> whether or not the latter would be necessary or not, but putting
> the per-state diff values wou
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi All,
thanks for revising Patrick! Attached is the updated patch.
Sorry had no time yet to remove the sysctl variables.
It will follow in a few weeks if I have more time :)
Best regards
Ulrich
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi all,
IPSec uses sequence numbers to protect against replay attacks.
So far there is no way to get or set these sequence numbers in the kernel.
The attached patches will remedy these issues. Any comments are
welcome! :)
I would be pleased if at lea
