On Thu, 5 Oct 2006, Venkat Yekkirala wrote: > > We're trying to fill the flow cache here. In the case where we'd > > have a match in both the sub-policy and main table, I think the > > sub-policy is supposed to take precedence, and if you fail to get > > this sub-policy you should fail the entire lookup. > > Which is what's happening here correct?
Yes, the patch is correct for this. The way sub-policy is used is during Mobile IP, where you have multiple policies composed, so it wouldn't make sense for one of the policies to be rejected and the other allowed and for packets to flow. - James -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
