John A. Sullivan III wrote: > Just as an aside, we've had problems using the top 16 bits of the 32 bit > marks. The OpenSWAN implementation on SnapGear devices changes the top > 16 bits all on its own with two separate bugs - one with compression > enabled and another regardless of compression- John You should talk to the *swan people, their kernel implementation is seriously fscked. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html