From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: when having to acquire an SA, ipsec drops the packet Date: Mon, 5 Feb 2007 15:34:39 -0500 (EST) Message-ID: References: <1170370281.2603.359.camel@faith.austin.ibm.com> <20070204.205315.10325007.davem@davemloft.net> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: latten@austin.ibm.com, netdev@vger.kernel.org, paul.moore@hp.com, vyekkirala@TrustedCS.com, herbert@gondor.apana.org.au To: David Miller Return-path: Received: from mail2.sea5.speakeasy.net ([69.17.117.4]:34833 "EHLO mail2.sea5.speakeasy.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933416AbXBEUen (ORCPT ); Mon, 5 Feb 2007 15:34:43 -0500 In-Reply-To: Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On Mon, 5 Feb 2007, James Morris wrote: > On Sun, 4 Feb 2007, David Miller wrote: > > > Something like this (untested) on the ipv4 side, for example: > > Looks like it should work. Will do some testing. Appears to work well, with a slight delay on the first packet as expected. Tested with tcp, udp & icmp. - James -- James Morris