Re: [PATCH] af_key: parse and send SADB_X_EXT_NAT_T_OA extension

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Timo Teräs
Date: Wednesday, January 21, 2009 - 11:54 pm

Herbert Xu wrote:

That ipsec-tools feature works on *BSD. Works on Linux too
as kernel does not (yet) use that for anything except reporting
it back. Other OSes might use it already to e.g. fix-up the
packet checksums in transport mode SAs; I believe Linux just
recalculates the checksum.

The future patch I have in my mind I've been talking about,
does make use of NAT-OA. So that's why I noticed it only
just now. Btw, could someone comment on the idea of passing
NAT-OA to neighbour cache and make xfrm use it when choosing
which xfrm state to use?

- Timo

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: [PATCH] af_key: parse and send SADB_X_EXT_NAT_T_OA ext ..., Timo Teräs, (Wed Jan 21, 11:54 pm)