[Swan-dev] ***UNCHECKED*** testing: drifting reference logs

Paul Wouters paul at nohats.ca
Wed Feb 11 10:02:10 EET 2015


On Tue, 10 Feb 2015, Antony Antony wrote:

> Recent, Feb 07 the, change to ipsec status output is confusing me. Is this an accident or real?  are we changing from ENCRYPT to AUTHENTICATE?

I pushed a fix for that into master.

> Also note the new labels are confusing. SAREF_TRACK_CONNTRACK is an odd name "TRACK" twice. DISABLEARRIVALCHECK what does it mean?

DISABLEARRIVALCHECK is not a new option at all. It is a tweak (klips
only) that allows disabling the policy src/dst checks on incoming
packets.

> policy line is getting too long to read, where is 80 charecter police:)

Splitting it would make it much harder to use grep on it in tests.

Paul


More information about the Swan-dev mailing list