Date: Tue, 21 Mar 2017 12:46:36 +0100 From: Kurt Jaeger <lists@opsec.eu> To: Miroslav Lachman <000.fbsd@quip.cz> Cc: freebsd-pf@freebsd.org Subject: Re: Support for the enc(4) pseudo-interface Message-ID: <20170321114636.GH64587@home.opsec.eu> In-Reply-To: <58D11201.1000403@quip.cz> References: <1490085811-bc1aa9c7b83aeddb9dee198bc4071b35@olivarim.com> <44FBCEF5-6151-46FF-A166-81E7306914CC@sigsegv.be> <58D11201.1000403@quip.cz>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi! > > If you want to filter on it it should work if you add ???device enc??? to your > > kernel config. The man page suggests that should then allow you to > > filter IPSec > > traffic on enc0. > > Shouldn't it be included in GENERIC if IPSec is now part of it? Yes, please include enc in the GENERIC kernel. -- pi@opsec.eu +49 171 3101372 3 years to go !
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170321114636.GH64587>