Date: Sun, 26 Oct 2003 08:52:22 -0800 From: Bill Swingle <unfurl@dub.net> To: "G. Panula" <greg.panula@lexisnexis.com> Cc: freebsd-security@freebsd.org Subject: Re: IPSec VPNs: to gif or not to gif Message-ID: <20031026165222.GA31223@dub.net> In-Reply-To: <3F97BA17.8050403@lexisnexis.com> References: <u0qcpv0csl3lb1p6a8aioe7qjqjtvd6th9@4ax.com> <3F97BA17.8050403@lexisnexis.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Thu, Oct 23, 2003 at 06:23:03AM -0500, G. Panula wrote: > Current behavior is encrypted packet is handled by ipfw once, then after > decryption it is only handled by ipfw(again) if it passes thru an > interface didn't arrive on. Does this apply to ipfilter as well? -Bill -- -=| Bill Swingle - <unfurl@(dub.net|freebsd.org)> -=| Every message PGP signed -=| PGP Fingerprint: C1E3 49D1 EFC9 3EE0 EA6E 6414 5200 1C95 8E09 0223 -=| "Computers are useless. They can only give you answers" Pablo Picasso [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/m/vGUgAclY4JAiMRAo51AJ91HRZbQnv1smz9LQJA2iIbpCtodACeOVmL v3paPTaEa0n1oq95QWtPppk= =5ON6 -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031026165222.GA31223>