Re: [Ipsec-tools-devel] No BUG for you! WAS(Re: [Bugme-new] [Bug 4952] New: IPSec incompabilty. Linux kernel waits to long to start using new SA for outbound traffic.

[Herbert Xu <he...@go...>]

On Sun, Oct 30, 2005 at 11:39:48PM +0100, Krzysztof Oledzki wrote:
> 
> In last two e-mails both David S. Miller and Herbert Xu agreed that this 
> should be fixed:
> 
> http://www.mail-archive.com/ne...@vg.../msg00959.html
> http://www.mail-archive.com/ne...@vg.../msg00973.html
> 
> So I don't understand why we need to discuss this again?

Actually, I didn't really agree to this.  What I meant is that if
we really had to do this then we should be able to turned it off
using something like a sysctl so people who don't care about this
won't have pay the price for it.

I'd much rather have it fixed in userspace.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <he...@go...>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt