Re: [Ipsec-tools-devel] ipv4/ipv6 forwarding check

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

Aidas Kasparas <a.kasparas@xxxxxx> wrote:
> 
>        Meanwhile, I would like to recomend to abstain from upgrading to 
> anything above 2.6.9.

Doesn't sound like a good idea as that's a massive security hole.

Racoon with a pre-2.6.9 kernel will allow source addresses to come
through the IPsec tunnel even if the violate IPsec policies.
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt