On Fri, Oct 19, 2007 at 02:37:38PM +0300, Joakim Koskela wrote: > Hi, > > I understand that Herbert is in midst of cleaning up the output of > interfamily transformations, but I thought I'd post a couple of > patches related to that anyway, sort of to show what we've needed to > fix to get our systems working. > > This one changes how the netfilters are applied during output to be > based on the current address family of the packet instead of what it > will be transformed to.
While I agree that this is definitely a problem, I've already got a solution for it which we happen to need for async crypto anyway. Basically xfrm_output will invoke a continuation function based on the external mode/family which will then call the right hooks. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
