David S. Miller <[EMAIL PROTECTED]> wrote: > > I've read over Patrick's two most recent postings of these patches > and I think they are generally sane and I cannot find any holes in > them. Herbert brought up the legitimate concern about defragmentation, > but I think that's a detail and does not take away from the structural > soundness of Patrick's approach.
Yes I agree completely. The new IPsec stack has been around for three years and it's about time that we have proper netfilter support for it. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html