Hello! > host A outside the trusted network. The selector of the IPCOMP tunnel > being any to any. Why would be this? Did we not agree that wildcard selectors on tunnel transformations are illegal? > Please let me know if you can find any flaws in my reasoning. I am afraid I did not understand the idea. Alexey - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html