[Ipsec-tools-devel] Does anybody work on supporting SPD matching Netfilter MARKS?

[Ludo S. <lu...@pr...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi All,

I was wondering if someone has been working on and/or has a patch
which implement's the use of Netfilter Marks for ipsec spd matching
under the linux kernel 2.6. This would be similar to the NetBSD
"tagged" option of 'setkey':

spdadd tagged "ssh" -P out esp/transport//require

But then something like:

~     spdadd tagged 1 -P out esp/transport//require
or  spdadd mark 1 -P out esp/transport//require

Thank in advance,
greetings,

Ludo Stellingwerff.

- --
Ludo Stellingwerff

V&S B.V. The Netherlands
ProTactive firewall solution.
Tel: +31 172 416116
Fax: +31 172 416124

site: www.protactive.nl
demo: http://www.protactive.nl:81/netview.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB7gHeOF3sCpZ+AJgRAvG/AKC6biVC6Z7SlCbUllNu7l6f26MURQCcC8V1
ZKprii65/iT8CwERNQR7UIc=
=KMrV
-----END PGP SIGNATURE-----