From owner-freebsd-net@FreeBSD.ORG  Mon Jun 28 22:11:17 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7424816A4CE
	for <net@FreeBSD.org>; Mon, 28 Jun 2004 22:11:17 +0000 (GMT)
Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch
	[62.48.0.70])	by mx1.FreeBSD.org (Postfix) with ESMTP id B03CE43D1D
	for <net@FreeBSD.org>; Mon, 28 Jun 2004 22:11:16 +0000 (GMT)
	(envelope-from andre@freebsd.org)
Received: (qmail 58355 invoked from network); 28 Jun 2004 22:11:15 -0000
Received: from unknown (HELO freebsd.org) ([62.48.0.53])
          (envelope-sender <andre@freebsd.org>)
          by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP
          for <bzeeb-lists@lists.zabbadoz.net>; 28 Jun 2004 22:11:15 -0000
Message-ID: <40E09784.C91C6466@freebsd.org>
Date: Tue, 29 Jun 2004 00:11:16 +0200
From: Andre Oppermann <andre@freebsd.org>
X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
References: <200406282140.i5SLeNxL087321@freefall.freebsd.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: net@FreeBSD.org
Subject: Re: kern/23400: IPsec transport mode precludes filtering 
 onunderlyingtransport header
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Jun 2004 22:11:17 -0000

"Bjoern A. Zeeb" wrote:
> 
> The following reply was made to PR kern/23400; it has been noted by GNATS.
> 
> From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
> To: freebsd-gnats-submit@FreeBSD.org, seraf@2600.com
> Cc:
> Subject: Re: kern/23400: IPsec transport mode precludes filtering on underlying
>  transport header
> Date: Mon, 28 Jun 2004 21:25:28 +0000 (UTC)
> 
>  > o [2000/12/09] kern/23400  net         IPsec transport mode precludes filtering
> 
>  I think this one can be closed.
> 
>  We can do filtering of IP encapsulated in IPSec since
> 
>  http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_fw2.c#rev1.34
>  resp.
>  http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_fw2.c#rev1.51
> 
>  with the ipsec flag.

Thanks Bjoern!  I have closed the PR according to your message.

-- 
Andre