From owner-freebsd-net  Mon Jan 14  9:16: 1 2002
Delivered-To: freebsd-net@freebsd.org
Received: from shark.amis.net (shark.amis.net [212.18.32.14])
	by hub.freebsd.org (Postfix) with ESMTP id C0B7537B41A
	for <freebsd-net@FreeBSD.ORG>; Mon, 14 Jan 2002 09:15:52 -0800 (PST)
Received: from baracuda.amis.net (baracuda.amis.net [212.18.32.4])
	by shark.amis.net (Postfix) with ESMTP
	id 4AAF97CCE; Mon, 14 Jan 2002 18:15:46 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by baracuda.amis.net (Postfix) with ESMTP
	id 15F4E9B0D; Mon, 14 Jan 2002 18:15:46 +0100 (CET)
Received: from titanic.medinet.si (titanic.medinet.si [212.18.42.5])
	by baracuda.amis.net (Postfix) with ESMTP
	id 92EB49B0C; Mon, 14 Jan 2002 18:15:44 +0100 (CET)
Received: by titanic.medinet.si (Postfix, from userid 1000)
	id 4951755411; Mon, 14 Jan 2002 18:15:44 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by titanic.medinet.si (Postfix) with ESMTP
	id 4684D55404; Mon, 14 Jan 2002 18:15:44 +0100 (CET)
Date: Mon, 14 Jan 2002 18:15:44 +0100 (CET)
From: Blaz Zupan <blaz@si.FreeBSD.org>
X-X-Sender: blaz@titanic.medinet.si
To: Lars Eggert <larse@ISI.EDU>
Cc: freebsd-net@FreeBSD.ORG
Subject: Re: Filtering packets received through an ipsec tunnel
In-Reply-To: <3C431170.5080506@isi.edu>
Message-ID: <20020114181510.S3425-100000@titanic.medinet.si>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Virus-Scanned: by AMaViS perl-10
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

> He was referring to using gif tunnels together with IPsec tunnel mode
> SAs (are you?) This "works" but precisely because of the side effect
> that Louis mentioned. A clean solution would user *either* IPIP tunnels
> (i.e. gif devices) and IPsec transport mode *or* IPsec tunnel mode (and
> no gifs). See the KAME IMPLEMENTATION file for details, or
> draft-touch-ipsec-vpn-02.txt (shameless plug :-).

Oh, ok, that was a misunderstanding, I was talkin about gif tunnels over IPsec
transport mode of course.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message