Date: Wed, 26 Jan 2005 10:23:36 +0100 From: "Simon L. Nielsen" <simon@FreeBSD.org> To: Jeremie Le Hen <jeremie@le-hen.org>, Nickolay Kritsky <Nickolay.Kritsky@astra-sw.com>, freebsd-net@freebsd.org Subject: enc(4) (was: Re: gif(4) and bpf(4)) Message-ID: <20050126092335.GA21369@eddie.nitro.dk> In-Reply-To: <20050126023354.GJ692@empiric.icir.org> References: <D86BF562467D944EB435513F725B236A07C122@exchange.stardevelopers4msi.com> <20050125171120.GH59685@obiwan.tataz.chchile.org> <20050125172049.GL47638@dhcp120.icir.org> <20050125173842.GI59685@obiwan.tataz.chchile.org> <20050126023354.GJ692@empiric.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--PEIAKu/WMn1b1Hv9 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2005.01.26 02:33:54 +0000, Bruce M Simpson wrote: > On Tue, Jan 25, 2005 at 06:38:42PM +0100, Jeremie Le Hen wrote: > > Are you thinking about the enc(4) interface [1] [2] provided with OpenB= SD ? >=20 > Somewhat, although whilst enc(4) provides some of this functionality, its > role as far as I can see is mainly to provide a 'tapping point' for filte= ring > packets as they pass out of the system and into IPSEC (something I believe > we now handle using mbuf tags). I have been looking into porting enc(4) from OpenBSD and have some partial patches at this point. The point of enc(4) AFAIK is to allow packet filtering of IPsec traffic, basically the ipfw "ipsec" keyword more generic, and bpf tapping of traffic in and out of IPsec tunnels. It's not really related to FreeBSD's use of mbuf tags for IPsec handling, since those are not "visible" from userland. Anyone, please correct me if I'm wrong. --=20 Simon L. Nielsen --PEIAKu/WMn1b1Hv9 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFB92GXh9pcDSc1mlERAl4SAJ0ZTirbyYOYqfVaiY89f9OQr31D3gCdHYpy aXGxKoluKT/fTqmjrPe/bPY= =f0zv -----END PGP SIGNATURE----- --PEIAKu/WMn1b1Hv9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050126092335.GA21369>