On Tue, Oct 14, 2003 at 03:54:31PM +0400, kuznet@ms2.inr.ac.ru wrote: > > We have lost knowledge that src/dst _were_ tunnel's ones, > this is the problem. OK. I can see two ways to encode this information in the security path. We can either encode all tunnels as xfrm states, or we can chain the security paths: struct sec_path { struct sec_path *prev; ... }; -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html