On Saturday 17 January 2004 5:47 pm, netfilter.lists.samba.org@xxxxxxxxxxxxx wrote: > Actually, not being able to filter traffic from an ipsec tunnel is a > killer. Either for netfilter, or for kernel 2.6 ipsec. I suspect it > will kill kernel 2.6 ipsec. Which is really bad since frees/wan > positively sucks. What do you think is wrong with FreeS/WAN? Antony. -- Perfection in design is achieved not when there is nothing left to add, but rather when there is nothing left to take away. - Antoine de Saint-Exupery Please reply to the list; please don't CC me.