Hi, Alexey I have a question when reading the IPSec code : In function xfrm_state_ok() Why don't we check tmpl->ealgos against x->props.ealgo, tmpl->calgos against x->props.calgo? I think it's appropriate to check if these two fields match. What's your opinion? Thanks, Forrest - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html