From owner-freebsd-questions Fri Dec 8 11: 6:57 2000 From owner-freebsd-questions@FreeBSD.ORG Fri Dec 8 11:06:54 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from lasher.thario.com (lasher.thario.com [63.227.22.20]) by hub.freebsd.org (Postfix) with ESMTP id 5BC1F37B401 for ; Fri, 8 Dec 2000 11:06:54 -0800 (PST) Received: from SWENG65M (root@localhost.thario.com [127.0.0.1]) by lasher.thario.com (8.11.1/8.11.1) with SMTP id eB8J6nu02779 for ; Fri, 8 Dec 2000 12:06:49 -0700 (MST) (envelope-from jim@thario.com) Message-ID: <003f01c0614a$046f4890$6df6a8c0@SWENG65M> From: "Jim Thario" To: Subject: ipsec policy confusion Date: Fri, 8 Dec 2000 12:06:47 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm a little confused as to why we specify a source IP, destination IP and direction in the spdadd command for setkey. It would seem that specifying a source and destination imply a direction of the packet. Can someone clarify this for me? Or, is it source and destination of a connection, and packet flow direction under that connection? Thanks, Jim To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message