Re: IPsec vs ssh

[Mouse <mouse%Rodents-Montreal.ORG@localhost>]

>> To be more precise, I don't want ssh packets to be handled
> Off the top of my head, I'm not sure how you would go about excluding
> a single protocol.

I'm tempted to tell you to stop being dense, but I don't know you well
enough to be sure that's what it is.

I think Darren is probably expecting the exception to apply not
strictly to ssh connections but rather to port-22 connections.  I too
think doing anything of the sort for exactly ssh connections will be
very difficult, but port 22 should be relatively easy and, in most
cases, "port 22" is close enough to "ssh" for practical purposes, even
though neither actually strictly implies the other.

/~\ The ASCII                             Mouse
\ / Ribbon Campaign
 X  Against HTML                mouse%rodents-montreal.org@localhost
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B