On Fri, 15 Aug 2003 12:51:16 +1000 (EST) James Morris <jmorris@intercode.com.au> wrote: > IKE needs to specify the range of the SPI. Both pfkey and the > native xfrm interfaces support this. Yes, but in the kernel we need to restrict whatever range we get so that it'll work for IPCOMP SPIs. I remember that the KAME kernel bits did this for the app, and thus we probably need to as well. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html