[Openswan dev] minor changes to _updown.ip2.in

[Tuomo Soini]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tuomo Soini wrote:
| These changes make it possible to use different routing table for ipsec
| traffic (configurable via /etc/sysconfig/openswan) and make it again
| possible not to use nexthop for non-OE connections.
|
| And I added some documentation too.

I forgot to mention one possible problem with this patch. It should be
specially tested if OE on local lan is not loosing first packet after
this change. I don't really know if it will but testing environment
should find it out.

This problem will of course happen only if nexthop = remote.

If first OE packet on same lan will wanish, klips really need fix for
packet caching code.

- --
Tuomo Soini <tis at foobar.fi>
Linux and network services
+358 40 5240030
Foobar Oy <http://foobar.fi/>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAvG79TlrZKzwul1ERAlI1AKCYnbYGyMMfKAtCPfEz9fctgKgLkgCgk08V
pRfiv8sTdIZWWbbo7VtFBW8=
=H7E0
-----END PGP SIGNATURE-----