Re: Relax source validation: VS/DR and VS/TUN as def gw

[Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx>]

        Hello,

On 16 Mar 2000, Stephen Zander wrote:

> >>>>> "Julian" == Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx> writes:
>     Julian>   There are no fresh changes in the routing code. You
>     Julian> can try with other 2.2 kernel and if there are no rejects
>     Julian> (HUNK FAILED) everything is OK.
> 
> The patch went cleanly over a 2.2.13 kernel and is now up & running in
> my lab firewall.
> 
> With this patch and the appropriate VIP devices on the real boxen,
> VS-DR through a firewall Just Works!  You rock Julian!.

        Thanks for the results.
> 
> One thing I am idly curious about, though.  'ipchains -M -L' still
> reports masquerading links even though I have no masquerading targets
> in any ipchains.  Is this just seepage from the VS code?

        Yep, all entries, even these in VS/DR mode are MASQ entries
and they are reported. This is correct.

Regards

--
Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx>