Date: Mon, 19 Oct 2009 21:50:25 +0200 From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org> To: Eric Masson <emss.mail@gmail.com> Cc: Mailing List FreeBSD Network <freebsd-net@freebsd.org> Subject: Re: IPSec, nat on enc device Message-ID: <9a542da30910191250r62a798a7m586343a800a3d65d@mail.gmail.com> In-Reply-To: <86eiozjt6p.fsf@srvbsdnanssv.interne.kisoft-services.com> References: <861vkzlula.fsf@srvbsdnanssv.interne.kisoft-services.com> <9a542da30910190707q7eb173d9xf9085d220a213db1@mail.gmail.com> <86eiozjt6p.fsf@srvbsdnanssv.interne.kisoft-services.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 19, 2009 at 5:32 PM, Eric Masson <emss.mail@gmail.com> wrote:
> Ermal Lu=E7i <eri@freebsd.org> writes:
>
> Hello Ermal,
>
>> I think you should send this email to ipsec-tool mailing list!
>> Basically the daemon should be modified for this and FreeBSD
>> is not the owner of such code.
>
> I know ;) I'll bug them regarding ${suject} as well (some ipsec-tools
> devs lurk there too)
>
> I'm not sure that pf & ipsec stack already support this feature. Maybe
> bz@ or vanhu@ will shed a light on this point.
>
AFAIK, there is not limitation to allow this in the IPSec stack.
So it is purely a daemon perspective to instrument the stack for this.
--=20
Ermal
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9a542da30910191250r62a798a7m586343a800a3d65d>