-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Jason" == Jason Thorpe <thorpej@shagadelic.org> writes:
    >> So, this was work that Bill Sommerfeld and I were trying to
    >> standardize as a piece of work that many call "PF_POLICY" (but we
    >> didn't want to actually make the API a socket-based one, leaving
    >> that for the implementor to worry about).

    Jason> Has that effort died?  I attended a few informal discussions
    Jason> about this topic when it was first being discussed, but was
    Jason> not able to stay involved and have not heard much about it
    Jason> since, until you mentioned it now.

  I'm still working on it, but I can't write a "standard" in isolation.
I wrote code for Openswan to prototype the first part [query] (and we even
demonstrated it at a BlackHat conference).

  I'm still interesting in continuing on this.

- -- 
] Michael Richardson          Xelerance Corporation, Ottawa, ON |  firewalls  [
] mcr @ xelerance.com           Now doing IPsec training, see   |net architect[
] http://www.sandelman.ca/mcr/    www.xelerance.com/training/   |device driver[
]                    I'm a dad: http://www.sandelman.ca/lrmr/                 [

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQwDIhYqHRg3pndX9AQF5XgP7B/vo55Jz/KkveyiojCEF1WZX9E5zZVNl
ubJYkNjYy7zk1flS8KU02lh/p3CDH2f9UxcjsCcrtUgEDXKh7mBv3xL99H8Q2YhE
RD+XUNN1AQRQqw9CsTAyLN//zh+o7SqVCME+B3FGwphNRi5xq1fsF55KjjA63gYT
8mHv4ulShPg=
=gXv3
-----END PGP SIGNATURE-----