Subject: Re: Netfilter and IPSec

From: Ingo Oeser <[email-masked]>
Date: Tue, 15 Apr 2008 18:54:43 +0200

Jan Engelhardt schrieb:
> It kinda brings me the question why the ipsec transformation is
> not done with an xtables target instead; that would also give
> handy access to connection tracking if needed.

And simplify firewalling A LOT :-)

BTW: Anybody has a working ipsec match these days or is this known broken?

Best regards

Ingo Oeser