Re: We should name conn's begining with underscore

-----BEGIN PGP SIGNED MESSAGE-----

>> DHR says:
> Actually, I think that the current behaviour works well.

  Yes, it works in the same brittle way that way too many Linux
subsystems do, and when it fails it fails both insecurely and worse
silently.

  If the use does NOT want OE they must really work at it, say by
turning the whole OE conn off with a long conn entry (at least TWO
lines of text!) in ipsec.conf, NOT by a single character typo.

  The whole point of 2.00 was that ALL that was needed was the right
keying information, and that if that and ONLY that were in place OE
would run.

  Finish building that, your only a brick away.

		||ugh Daniel
		[email protected]

			Systems Testing & Project mis-Management
			The Linux FreeS/WAN Project
			http://www.freeswan.org

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPlAVx1ZpdJR7FBQRAQEWMwQAxHDxziW0po0V7/QFt9p1utf64BBLfbfc
tI9LG0LjF42DioPTm5/vcc2+p4wALAgEHa+JyNPFQ7xrIUvChzCUg8kwy60hw8H9
yr/TcmsxAMlKOt55DmWN7ych+SbUZpnOQwWMnmDNnKv/gMIoJAzCOg3oVnCIpUCT
r6b6Ng0+sRY=
=i+vl
-----END PGP SIGNATURE-----