Date: Sat, 22 Jul 2017 07:36:58 +0200 From: "Muenz, Michael" <m.muenz@spam-fetish.org> To: freebsd-net@freebsd.org Subject: Re: NAT before IPSEC - reply packets stuck at enc0 Message-ID: <1c91cd8f-105d-e886-3126-67505c6c3900@spam-fetish.org> In-Reply-To: <63e80fcf-915e-2dd5-d8c9-1904c8261c6f@yandex.ru> References: <459d59f7-2895-8aed-d547-be46a0fbb918@spam-fetish.org> <a082662c-145e-0132-18ef-083adaa59c33@yandex.ru> <1c0de616-91ff-a6f9-d946-f098bc1a709f@spam-fetish.org> <911903d1-f353-d5d6-d400-d86150f88136@yandex.ru> <2d607e1a-a2c0-0f85-1530-c478962a76cd@spam-fetish.org> <3344e189-cdf0-a2c9-3a2a-645460866f2d@yandex.ru> <1279753e-9ad1-2c02-304e-5001e2bbc82f@spam-fetish.org> <15e6eb38-ef0c-7bfd-5f2c-d2acc8ea1af4@yandex.ru> <cdb7e172-4074-4559-1e91-90c8e9276134@spam-fetish.org> <63e80fcf-915e-2dd5-d8c9-1904c8261c6f@yandex.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Am 21.07.2017 um 13:08 schrieb Andrey V. Elsukov: > > With ipfw(4) it should work, at least on FreeBSD. pfsense/opensense have > their own patches, so I don't know what can be wrong there. > I also tried 11.0 and 11.1RC3 vanilla kernels, no luck. Will build a test setup with the OPNsense devs. I'm still positive that this can't be a huge issue. Thanks for your efforts Andrey! Michael
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1c91cd8f-105d-e886-3126-67505c6c3900>