Re: Suggestion: Crypto-target

Bart De Schuymer <[email protected]>
Newsgroups gmane.linux.network.bridge.ebtables.devel
Message-ID <[email protected]>
On Sunday 26 September 2004 04:30, Rene Bartsch wrote:
> Hi,
>
> I want to do a suggestion for a new ebtables target: crypto
>
> That target shouldn't do anything else than passing the data through the
> kernel crypto-api.

Encrypting has the side effect of enlarging a packet and the Ethernet protocol 
does not support fragmentation. The upper layers (IP) must be used to allow 
fragmentation. IP fragmentation does not belong in ebtables.

Here's an example to use IPSec on a bridge:
http://ebtables.sourceforge.net/examples/example3.html

cheers,
Bart



-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.