RE: IPSEC and NAT

["John A. Sullivan III" <john.sullivan@nexusmgmt.com>]

On Sat, 2004-10-16 at 02:53, Emiel Mols wrote:
<snip>
> Indeed, the problem is that the packets get encrypted before reaching
> POSTROUTING. I've managed the patch you're referring to:
> 
> router linux # cat ../patch-o-matic-ng-20040621/ipsec-01-output-hooks/help
> [NETFILTER+IPSEC 1/4]
> 
> This patch adds new output hooks for IPsec. Packets traverse the hooks like
> this:
> 
> 1. -> (plain) FORWARD   -> POST_ROUTING -> (encrypted) LOCAL_OUT ->
> POST_ROUTING
> 2. -> (plain) LOCAL_OUT -> POST_ROUTING -> (encrypted) LOCAL_OUT ->
> POST_ROUTING
> 
> However, I can't get it patched on 2.6.8.1 (about 5 rejects) and 2.6.7 (1
> reject). This patch is just what I need, but further downgrading isn't an
> option. Has anyone succeeded with this patch in a recent 2.6 kernel?
I'd imagine you have but, just in case, have you applied any dependent
patches? For example, when I first applied the tcp window patch, I had
the same problem until I realized I had to apply all the pending patches
first.
> 
<snip>
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com