Re: ipsec patches test: minor compilation and policy match issues

[Stephen Frost <sfrost@snowman.net>]

[-- Attachment #1: Type: text/plain, Size: 870 bytes --]

* Ivan Mitev (imitev@obs.bg) wrote:
> i'm using the CVS (20040415) version of iptables and pom-ng, and kernel
> 2.6.5, to test the new ipsec patches (ipsec-XX + policy).  

I'm doing basically the same thing.  20040710 or so of POM and iptables
and 2.6.7.  Got everything built/compiled/installed/etc.  IPSEC is all
working and whatnot.  My problem is matching things.  I've been trying
to match using spi and I just can't seem to get it to work.  I'm using
the spi I get from setkey -D and from tcpdump but no matter what I try
it doesn't work.

Sorry I can't give more details, but is this supposted to work?  I'll
see about adding something to ipt_policy.c to get it to print out what
it thinks the SPI is tommorow, hopefully.  Anyone else tried this?

The match works if I don't have --spi 0x<blah>, doesn't work if I do. :/

	Thanks,

		Stephen

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]