On Fri, Jun 27, 2003 at 02:15:39AM -0700, David S. Miller wrote: > > So you agree with uses of optional transforms such as ipcomp, right? In principle yes. However, I still have problems with the implications for address spoofing. I still don't know how I can possible filter out spoofed packages through such a tunnel using the existing firewall facility. -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html