On Thu, 2009-10-29 at 23:33 +0100, Patrick McHardy wrote: > John A. Sullivan III wrote: > > Just as an aside, we've had problems using the top 16 bits of the 32 bit > > marks. The OpenSWAN implementation on SnapGear devices changes the top > > 16 bits all on its own with two separate bugs - one with compression > > enabled and another regardless of compression- John > > You should talk to the *swan people, their kernel implementation > is seriously fscked. I believe the excellent folks at SnapGear are doing just that. They were the ones with the skills to find it. I was only able to point out the symptoms - John -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan@xxxxxxxxxxxxxxxxxxx http://www.spiritualoutreach.com Making Christianity intelligible to secular society -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html