Date: Sun, 26 Oct 2003 08:52:22 -0800 From: Bill Swingle <unfurl@dub.net> To: "G. Panula" <greg.panula@lexisnexis.com> Cc: freebsd-security@freebsd.org Subject: Re: IPSec VPNs: to gif or not to gif Message-ID: <20031026165222.GA31223@dub.net> In-Reply-To: <3F97BA17.8050403@lexisnexis.com> References: <u0qcpv0csl3lb1p6a8aioe7qjqjtvd6th9@4ax.com> <3F97BA17.8050403@lexisnexis.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--ew6BAiZeqk4r7MaW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Oct 23, 2003 at 06:23:03AM -0500, G. Panula wrote: > Current behavior is encrypted packet is handled by ipfw once, then after= =20 > decryption it is only handled by ipfw(again) if it passes thru an=20 > interface didn't arrive on. Does this apply to ipfilter as well? -Bill --=20 -=3D| Bill Swingle - <unfurl@(dub.net|freebsd.org)> -=3D| Every message PGP signed -=3D| PGP Fingerprint: C1E3 49D1 EFC9 3EE0 EA6E 6414 5200 1C95 8E09 0223 -=3D| "Computers are useless. They can only give you answers" Pablo Picasso= =20 --ew6BAiZeqk4r7MaW Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/m/vGUgAclY4JAiMRAo51AJ91HRZbQnv1smz9LQJA2iIbpCtodACeOVmL v3paPTaEa0n1oq95QWtPppk= =5ON6 -----END PGP SIGNATURE----- --ew6BAiZeqk4r7MaW--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031026165222.GA31223>