From owner-freebsd-ipfw@FreeBSD.ORG Sun Nov 19 20:01:02 2006 Return-Path: X-Original-To: ipfw@freebsd.org Delivered-To: freebsd-ipfw@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1EE7516A505 for ; Sun, 19 Nov 2006 20:01:02 +0000 (UTC) (envelope-from infofarmer@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.184]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6DCF243E46 for ; Sun, 19 Nov 2006 20:00:28 +0000 (GMT) (envelope-from infofarmer@gmail.com) Received: by nf-out-0910.google.com with SMTP id x37so1708743nfc for ; Sun, 19 Nov 2006 12:00:38 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=MvFzSfj/jM/XV6vMZYjD4+hnLKBvOpVElP3G402qSq/IyCEW2M+PZ3GT0sQfqtjPp5qvByiBnQIvjPOicyujTA3yGlR5VJxgftahF28bkFkDYllfehYgDkZDGRFiHh1158SInVDLrlpu1vkm0SRmjGRVOHEM9gvpN5dABV0KZCY= Received: by 10.78.117.10 with SMTP id p10mr4431174huc.1163966437822; Sun, 19 Nov 2006 12:00:37 -0800 (PST) Received: by 10.78.167.16 with HTTP; Sun, 19 Nov 2006 12:00:37 -0800 (PST) Message-ID: Date: Sun, 19 Nov 2006 23:00:37 +0300 From: "Andrew Pantyukhin" Sender: infofarmer@gmail.com To: current@freebsd.org, ipfw@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Google-Sender-Auth: a9d62923780f9664 Cc: Subject: ipfw ipsec flag X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Nov 2006 20:01:02 -0000 Does anyone have subj working? I have IPSEC+ESP+ FILTERGIF compiled in kernel on very recent 7-CURRENT/amd64 and 6-STABLE/i386 which fail to "count ipsec" whatever I try. With/without ESP; manually configured with setkey or set via racoon2/ikev2... On 7-CURRENT I have a GENERIC kernel with no extra options than those 3 IPSEC ones. No gifs or tunnels though...