From: Daniil Stolnikov Subject: Re: Add IPSec IP Range in Linux kernel Date: Tue, 8 Nov 2011 18:51:52 +0800 Message-ID: <1936723309.20111108185152@mail.ru> References: <92909814.20111108111036@mail.ru> <1320733465.21617.4.camel@ppwaskie-mobl2> Reply-To: Daniil Stolnikov Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8BIT Cc: linux-kernel@vger.kernel.org, netdev@vger.kernel.org, , , To: Peter P Waskiewicz Jr Return-path: Received: from smtp3.mail.ru ([94.100.176.131]:49057 "EHLO smtp3.mail.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750892Ab1KHKwH convert rfc822-to-8bit (ORCPT ); Tue, 8 Nov 2011 05:52:07 -0500 In-Reply-To: <1320733465.21617.4.camel@ppwaskie-mobl2> Sender: linux-crypto-owner@vger.kernel.org List-ID: > On Mon, 2011-11-07 at 19:10 -0800, Daniil Stolnikov wrote: >> Hello! >> >> Found that the stack IPSec in Linux does not support any IP range. Many people ask this question. The archives say strongswan said that their daemon supports a range, but the Linux IPSec stack supports only the subnets. I am writing to you to implement support for IP range in Linux. I think that a lot more people will appreciate this innovation. > It'd be even better if you could write a patch for us to review. > Cheers, > -PJ I was a little not so put it:) I'd certainly be happy and he would write a patch, but I'm afraid do not have the necessary knowledge to implement IPSec Linux. I turned to you, the developers, but rather to urge you to implement this feature using IP range. I hope very much for your help and support. This is especially beneficial for all - the Linux kernel will be more flexible and more compatible with different devices and software. Regards Daniil Stolnikov