Date: Wed, 19 Jul 2017 14:49:46 +0200 From: "Muenz, Michael" <m.muenz@spam-fetish.org> To: freebsd-net@freebsd.org Subject: Re: NAT before IPSEC - reply packets stuck at enc0 Message-ID: <6001d6b1-575e-d37a-61ef-ba84472b04e7@spam-fetish.org> In-Reply-To: <1279753e-9ad1-2c02-304e-5001e2bbc82f@spam-fetish.org> References: <459d59f7-2895-8aed-d547-be46a0fbb918@spam-fetish.org> <a082662c-145e-0132-18ef-083adaa59c33@yandex.ru> <1c0de616-91ff-a6f9-d946-f098bc1a709f@spam-fetish.org> <911903d1-f353-d5d6-d400-d86150f88136@yandex.ru> <2d607e1a-a2c0-0f85-1530-c478962a76cd@spam-fetish.org> <3344e189-cdf0-a2c9-3a2a-645460866f2d@yandex.ru> <1279753e-9ad1-2c02-304e-5001e2bbc82f@spam-fetish.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Am 19.07.2017 um 14:46 schrieb Muenz, Michael: > > > > ipfw -ta list > 00179 4 112 Wed Jul 19 14:40:34 2017 nat 1 log ip from > 10.26.2.0/24 to 10.24.66.0/24 > 00179 4 112 Wed Jul 19 14:40:34 2017 nat 2 log ip from > 10.24.66.0/24 to 10.26.1.1 in recv enc0 Sorry, old paste with 2 instaces. root@PB-FW1-FRA:~ # ipfw -ta list 00179 211 5908 Wed Jul 19 14:48:43 2017 nat 1 log ip from 10.26.2.0/24 to 10.24.66.0/24 00179 22 616 Wed Jul 19 14:45:38 2017 nat 1 log ip from 10.24.66.0/24 to 10.26.1.1 in recv enc0 65535 10617 3717450 Wed Jul 19 14:48:43 2017 allow ip from any to any
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6001d6b1-575e-d37a-61ef-ba84472b04e7>