Date: Sun, 19 Jan 2014 05:46:19 GMT From: Alexander <a.v.volobuev@gmail.com> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/185876: ipfw not matching incoming packets decapsulating ipsec. example l2tp/ipsec Message-ID: <201401190546.s0J5kJVG024941@oldred.freebsd.org> Resent-Message-ID: <201401190550.s0J5o09t059801@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 185876 >Category: kern >Synopsis: ipfw not matching incoming packets decapsulating ipsec. example l2tp/ipsec >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Jan 19 05:50:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: Alexander >Release: Freebsd 10.0 >Organization: itm holding >Environment: FreeBSD evridika.solaris.local 10.0-RELEASE FreeBSD 10.0-RELEASE #0 d44ce30(releng/10.0): Sun Jan 19 11:05:14 YEKT 2014 root@evridika.solaris.local:/usr/obj/usr/src/sys/solaris.v10.0d amd64 >Description: mpd connect work vpn l2tp/ipsec daemon ike: strongswan vpn connected and fine work, but if matching ipfw rule: ipfw add allow ip from any to $me_ip_vpn_address then not work, not matching. It problem if strongswan use for ike2 vpn and do ipfw nat: ipfw nat 1 ip from $virtual_ip to any In releng/9.2 this work fine >How-To-Repeat: ipfw matching incoming packets decapsulating ipsec on releneg/10.0 >Fix: unknow >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201401190546.s0J5kJVG024941>