Hello! > In fact, the information for this is already available in the form > of xfrm_state->sel. It is not. That's problem. This selector is wildcard. > The selector check in xfrm_policy_check doesn't make sense anyway. Well, if it is not wildcard, it is defintely ambiguous and has to be repaired to match rfc2401. Alexey - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html