Re: Netfilter+IPsec patches in pom-ng now

[Alexander Samad <alex@samad.com.au>]

[-- Attachment #1: Type: text/plain, Size: 1457 bytes --]

On Wed, Apr 14, 2004 at 04:30:32AM +0200, Patrick McHardy wrote:
> I've just commited the netfilter+ipsec patches to pom-ng.
> 
> The input patch is replaced with a new version which just
> posts packets which are done with ipsec into the stack again
> and lets them traverse the hooks at the usual places. The
> advantage is the simplicity and transparency for netfilter,
> the disadvantage is an extra pass through the stack.
> 
> Some bugs have been fixed since the last set of patches:
> 
> - IPIP packets decapsulated from IPsec missed the input hooks
> - multiple other problems related to the old input patch
> - compiles without CONFIG_NETFILTER
> - icmp/igmp didn't traverse POST_ROUTING before encapsulation
> - possible NULL-ptr dereference fixed
> 
> They still need some work but mostly cleanup, nothing critical.
> 
> The patches are split into four parts, but pom-ng does not handle
> recursive dependencies when dependant patches change the same
> piece of code and --dry-run fails, so the patches need to be
> applied manually in the right order. The patches are named in
> a way that they will appear in the correct order during "runme".

Work out my problem with 2.6.5, need to apply nf_reset patch first.



> 
> Regards
> Patrick
> 
> PS: I've CCed some people who showed interest, but who I think
> are not subscribed to the list. Please tell me in private if
> you want don't want these mails.
> 

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]