Re: [PATCH] IPSec anti-replay sequence numbers

2005-08-06 Thread Ulrich Weber
KOVACS Krisztian wrote: Hi, On Friday 05 August 2005 12.50, Patrick McHardy wrote: Is there already userspace code which uses this feature somewhere? AFAIK Ulrich has a patch for OpenSWAN, and we (Balabit) have a patch for racoon. Unfortunately this racoon version is available

Re: [PATCH] IPSec anti-replay sequence numbers

2005-08-04 Thread Ulrich Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi All, thanks for revising Patrick! Attached is the updated patch. Sorry had no time yet to remove the sysctl variables. It will follow in a few weeks if I have more time :) Best regards Ulrich -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1

Re: [PATCH] IPSec anti-replay sequence numbers

2005-08-04 Thread Ulrich Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 KOVACS Krisztian wrote: Ulrich, I already have some code which supports per-state difference settings, along with optional time limits. I don't know whether or not the latter would be necessary or not, but putting the per-state diff values would