[Openswan dev] NAT-T fix for netlink interface

Andreas Gruenbacher agruen at suse.de
Tue Feb 17 14:34:23 CET 2004


Hello,

one piece is still missing here (see
http://lists.openswan.org/pipermail/dev/2004-January/000025.html): the
port of nat-t I did does not introduce an update_esp_sa callback, but
your port does. So to complete nat-t, you will have to (a) implement
netlink_update_esp_sa analogously to pfkey_update_esp_sa, or (b) replace
update_esp_sa by add_sa as in my port, which can be found at
http://www.suse.de/~agruen/freeswan/.

Which way do you want to go?

On Tue, 2004-02-10 at 14:48, Michal Ludvig wrote: 
> Hi,
> 
> attached is a fix for Arkoon's NAT-T patch for 2.04. It enables adding 
> the NAT-T SA over netlink interface (e.g. for use with vanilla 2.6 kernel).
> 
> I was told it may interest the Openswan people as well, so I'm Cc:ing 
> the list.
> 
> Have a nice day!
> 
> Michal Ludvig

Regards,
-- 
Andreas Gruenbacher <agruen at suse.de>
SUSE Labs, SUSE LINUX AG



More information about the Dev mailing list