[Openswan dev] 2.1.0rc1 and nat-t patch

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "gary" == gary ng <garyng2000 at yahoo.com> writes:
    gary> I tried the kern.patch but it doesn't include nat-t as far as
    gary> I can tell(nothing changes net/ipv4/udp.c).

    gary> I then download the full 2.1.0rc1 tree and try a 'make
    gary> menugo', again nat-t is not included in the patch.

    gary> After briefly browse through the Makefile, I add the 'make
    gary> nattpatch ...' under applypatch and now the nat-t patch goes
    gary> in.

    gary> Have I overlooked something in the documentation or is this
    gary> the right way to do it ?

  It is the right way.
  If we included it in the basic kernel patch, then it would fail on any
system/distro that had included the udp.c patch.

  The documentation needs work.

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQFD/3oqHRg3pndX9AQHoPwP6AhtKH30cLES3iwSVyYtVUgvEgmO7Gvh7
UZs5pFXKwzMZy5c3aAEExOkDCFgNlK0kk5eSPjb027k5Cccdg7YF4vrKIAnv41cY
wCTekCT77EUgWv9t+klxn8Ud5S1ybk8tJDjXeHLR/yP1HhwI9zwIvDyv0fTz4IFy
Mtu0n/XG+As=
=p44G
-----END PGP SIGNATURE-----