Re: [Ipsec-tools-devel] [PATCH]: Tunnel wildcard source addresses

[Patrick M. <ka...@tr...>]

Emmanuel Dreyfus wrote:
> Patrick McHardy <ka...@tr...> wrote:
> 
> 
>>>Why are you using such SPD entry, instead of using generated policies ?
>>
>>Because my side is the initiator.
> 
> 
> Can't you get what you want by using a phase1-up hook script?

That would probably work, but I would prefer a more transparent
solution. But please hold on to the patch in any case, we are
considering doing this in the kernel.