thanks tom.
Jim
---------- Original Message -----------
From: Tom Eastep <teastep@shorewall.net>
To: jim@contactbda.com, Mailing List for Shorewall Users
<shorewall-users@lists.shorewall.net>
Sent: Sun, 24 Oct 2004 13:35:10 -0700
Subject: Re: [Shorewall-users] openswan+shorewall+kernel 2.6.8 debian
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jim Buttafuoco wrote:
> > I am trying to get a debian system with openswan 2.2 shorewall 2.1.11
> + debian kernel 2.6.8 working together. I have
> > read the documentation (IPSEC using Linux Kernel 2.6) and before I go
> and compile my own modules I would like to know
> > if the standard debian kernel already has the Netfilter+ipsec patches
> and the policy match patches installed.
> >
> > Does anyone know?
> >
>
> iptables -m policy --help
>
> If that works, your iptables has policy match.
>
> iptables -N foo
> iptables -N foo -m policy --pol none
>
> If that works, your kernel has policy match (and probably has the other
> patches since it would be criminal to include policy match without the
> Netfilter+ipsec patches).
>
> - -Tom
> - --
> Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
> Shoreline, \ http://shorewall.net
> Washington USA \ teastep@shorewall.net
> PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFBfBH+O/MAbZfjDLIRAq04AJ9FD5nKBMvADU4dhxCzUXbrcW+BGgCglLq7
> PZFNgtw+lJP3M7hODtU8ZaM> =/InM
> -----END PGP SIGNATURE-----
------- End of Original Message -------