On Wednesday 05 May 2004 5:12 pm, Aleksandar Milivojevic wrote: > Antony Stone wrote: > > That's the way FreeS/WAN does it. > > Yes, I know that's the way FreeS/WAN implements it. But it doesn't mean > it is the only way it can be implemented. Well that is certainly true, but if you are using FreeS/WAN then this is the system you have to work with. > Actually, I like better Linux 2.6 implementation that doesn't use virtual > devices. Yes, it seems like a better design; now if only we could work out how to filter the unencrypted traffic before it all just disappears down the tunnel, it might turn out to be a good idea. Regards, Antony. -- Anyone that's normal doesn't really achieve much. - Mark Blair, Australian rocket engineer Please reply to the list; please don't CC me.