On Tue, Sep 30, 2003 at 03:14:50AM -0700, David S. Miller wrote: > > Thanks for explaining. I thought policy checks checked more than just > actually applied SAs (so f.e. you could create policy like "ESP with > key foo inner protocol must be TCP" and policy checks would enforce > this, aparently this feature does not exist :( ). I think you can do that with SA selectors. -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
