From owner-freebsd-stable Wed Nov 20 5:47:41 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E9CF537B401 for ; Wed, 20 Nov 2002 05:47:39 -0800 (PST) Received: from gvr.gvr.org (gvr.gvr.org [212.61.40.17]) by mx1.FreeBSD.org (Postfix) with ESMTP id 59F0E43E6E for ; Wed, 20 Nov 2002 05:47:38 -0800 (PST) (envelope-from guido@gvr.org) Received: by gvr.gvr.org (Postfix, from userid 657) id 45BDD2A4; Wed, 20 Nov 2002 14:47:35 +0100 (CET) Date: Wed, 20 Nov 2002 14:47:35 +0100 From: Guido van Rooij To: Scott Ullrich Cc: 'Archie Cobbs' , David Kelly , "'greg.panula@dolaninformation.com'" , FreeBSD-stable@FreeBSD.ORG Subject: Re: IPsec/gif VPN tunnel packets on wrong NIC in ipfw? SOLUTION A ND QUESTIONS Message-ID: <20021120134735.GA10249@gvr.gvr.org> References: <2F6DCE1EFAB3BC418B5C324F13934C9601D23C7A@exchange.corp.cre8.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2F6DCE1EFAB3BC418B5C324F13934C9601D23C7A@exchange.corp.cre8.com> Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Nov 20, 2002 at 08:51:55AM -0500, Scott Ullrich wrote: > Gudio, > > Please do not take offense to my comment. I was simply letting you know I > sent this to you yesterday. > > I sent 2 sets of outputs from the commands, the first time before switching > to transport mode from tunnel. After switching I tried every rule variation > I could think of to no avail. > > After looking at the below message, I cannot honestly see a differece > between the setkey -D -P commands besides the IP's that are in use. Can you > eloborate a little? > Yes, you are encrypting the wrong packets. You should be encrypting the tunneled packet but you are tunneling the encrypted packets. Please just try what I adviced. > Again, please do not take a offense to my messages; its very easy to take > email tone out of context. Okay, point taken. -Guido To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message