Re: ipsec patches test: minor compilation and policy match issues

[Patrick McHardy <kaber@trash.net>]

Stephen Frost wrote:
> * Patrick McHardy (kaber@trash.net) wrote:
>
>>The --spi option matches the spi given in the setkey policy with
>>unique:number. I'll update the manpage ..
> 
> 
> Ahhh, now that makes much more sense.  I just had 'require' before.  I'm
> getting closer it seems.  Now, at least, I seem to be able to match the
> number I put after the 'unique:' using '--reqid'.  Still doesn't work
> when using '--spi' though.  Not sure that I care though, unless someone
> can tell me a reason why I should?  It's important, of course, to match
> the right packets, since I'm doing tunneling and different remote sites
> will have access to different things and so different firewall rules to
> handle them...

Ooops, right, that was the --reqid option. I need to update the manpage
again ;) Not sure what the problem with --spi is, I will test is myself
soon.

Regards
Patrick


> 
> 	Thanks,
> 
> 		Stephen