Re: [Ipsec-tools-devel] ipv4/ipv6 forwarding check

[Michal Ludvig <michal@xxxxxxxx>]

On Fri, 29 Oct 2004, Aidas Kasparas wrote:

> 1) push kernel developers to have rfc2401 semantics in kernel;
> 1a) have pfkey kernel part transform rfc2401 semantics into kernel 
> semantics;
> 2) have libpfkey generate extra policies transparently to the user;
> 3) have tools (setkey and racoon) generate extra policies
> transparently to the user;
> 4) extend setkey's syntax to make explicit forward policy management
> possible and write docs for all the admins to change policies.

At least we must provide #4 - now it doesn't work at all, with explicit 
fwd policies things could be set up in most cases except for policy 
autogeneration in racoon. 

I hope to do the setkey part today.

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal