On Tue, Jul 07, 2009 at 10:18:45AM +0800, Herbert Xu wrote:

On Mon, Jul 06, 2009 at 07:02:35PM -0700, David Miller wrote:

quoted

Indeed, there is no way to handle checksums sanely.  The whole
end-to-end protection of the checksum would be entirely subverted
if we fixed it up.

Oh and if we were going to fix it up, it'd make much more sense
as an explicit netfilter target so people know what they're
getting themselves into.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt