Re: [Swan-dev] adding nft support

2022-06-16 Thread Andrew Cagney
On Thu, 16 Jun 2022 at 12:12, Paul Wouters wrote: > > > > > On Jun 16, 2022, at 11:56, Antony Antony wrote: > > > > I made iptables optional now. this will allow > > Thanks! > > > do we need iptables in "ipsec look" To me it seems a remenant from KLIPS > > mast? > > I think the entire command ca

Re: [Swan-dev] adding nft support

2022-06-16 Thread Paul Wouters
> On Jun 16, 2022, at 11:56, Antony Antony wrote: > > I made iptables optional now. this will allow Thanks! > do we need iptables in "ipsec look" To me it seems a remenant from KLIPS > mast? I think the entire command can go. We mostly rewrote the tests but would still need to fix up more

Re: [Swan-dev] adding nft support

2022-06-16 Thread Antony Antony
I made iptables optional now. this will allow adding nftables soon. CAT and NFLOG are optional now, ATM need iptabels. I don't know the syntax for nft yet. Also the use of iptbales in "ipsec verify" is optional do we need iptables in "ipsec look" To me it seems a remenant from KLIPS mast? the