Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Nov 2011 16:52:58 +0100
From:      Kurt Jaeger <pi@opsec.eu>
To:        freebsd-stable@freebsd.org
Subject:   fbsd 8.2, L2TP over IPsec and pf ?
Message-ID:  <20111103155258.GA68080@home.opsec.eu>

next in thread | raw e-mail | index | archive | help
Hello,

I'm building a setup for incoming L2TP over IPsec connections
using FreeBSD 8.2-REL.

IPsec based on ports/security/ipsec-tools, the l2tp part
works from net/mpd5/.

If I disable the PF rules, everything works.

If I enable the PF rules, the IPsec connection still comes up,
but the L2TP requests are lost somewhere in the PF rules 8-(

Interestingly, tcpdump enc0 does not see any encrypted packets (!)
as long as the PF rules are active.

Any hints on the PF rules required to allow those packets in ?

Thanks!

-- 
pi@opsec.eu            +49 171 3101372                         9 years to go !



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111103155258.GA68080>