From owner-freebsd-net@FreeBSD.ORG Mon Nov 29 15:04:19 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 65BBB16A4CF for ; Mon, 29 Nov 2004 15:04:19 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id C37AE43D70 for ; Mon, 29 Nov 2004 15:04:18 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 2087 invoked from network); 29 Nov 2004 14:55:52 -0000 Received: from unknown (HELO freebsd.org) ([62.48.0.53]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 29 Nov 2004 14:55:52 -0000 Message-ID: <41AB3A74.8C05601D@freebsd.org> Date: Mon, 29 Nov 2004 16:04:20 +0100 From: Andre Oppermann X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Joost Bekkers References: <20041129100949.GA19560@bps.jodocus.org> <41AAF696.6ED81FBF@freebsd.org> <20041129103031.GA19828@bps.jodocus.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org Subject: Re: (review request) ipfw and ipsec processing order for outgoingpackets X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2004 15:04:19 -0000 Joost Bekkers wrote: > > On Mon, Nov 29, 2004 at 11:14:46AM +0100, Andre Oppermann wrote: > > > > > > The attached patch is against 5.3R > > > > Please post unified diffs. > > > > Ok, here you go. While this way of 'fixing' the IPSEC problem works it is rather gross and not very stylish. I prefer not to have this in the tree as makes maintainance a lot harder. I have some stuff wrt [Fast]IPSEC and your problem in the works and it should become ready around christmas time (loadable [Fast]IPSEC, at least for IPv4). -- Andre