Re: ipt_ROUTE for kernel 2.6.21.5

On Mon, 30 Jul 2007, Patrick McHardy wrote:

> Krzysztof Oledzki wrote:
>> 1. ROUTE has a very usefull option --tee. AFAIK it
is not possible to do
>> it other way.
>
>
> Thats true. Not sure in what practical situation it is
used though.
>
>> 2. Policy routing based on fwmark is not always an
option if you use
>> marks for other purposes.
>
>
> Maybe (trying to avoid getting into discussion about
too small mark
> values again ).
>
>> So, if it is going to be removed from pom-ng I
would like to keep it in
>> my external pomng-repository.
>
>
> Please go ahead.

So I added it to my pom-ng repository for now, with fixes
for 
2.6.21/2.6.22.

> Just FYI: One more reason for removing it is that its
broken wrt.
> IPsec handling

Could you explain it a bit? What is wrong and maybe some
clue how it 
should be fixed?

> and the duplicated functions from ip_output are out
> of sync

OK, found it. This is a easy part to fix. 

> (and I think there were a few smaller problems as
well).

For example?

> If there really is a need for something like the tee
functionality
> I'm not opposed to considering merging a clean patch
without these
> problems for that.

OK. I'll do my best. 

Best regards,

 				Krzysztof Olędzki

On Aug 29 2007 13:23, Krzysztof Oledzki wrote:
>
>> Just FYI: One more reason for removing it is that
its broken wrt.
>> IPsec handling
>
> Could you explain it a bit? What is wrong and maybe
some clue how it should be
> fixed?

ip_direct_send does not do IPSEC IIRC.


	Jan
--