Re: IPSec VPNs: to gif or not to gif
From: Crist J. Clark (cristjc_at_comcast.net)
Date: 10/27/03
- Previous message: twig les: "Re: How to disable XFree86 and wdm listening ports"
- In reply to: Bill Swingle: "Re: IPSec VPNs: to gif or not to gif"
- Next in thread: Jim Hatfield: "Re: IPSec VPNs: to gif or not to gif"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 27 Oct 2003 14:19:16 -0800 To: Bill Swingle <unfurl@dub.net>
On Sun, Oct 26, 2003 at 08:52:22AM -0800, Bill Swingle wrote:
> On Thu, Oct 23, 2003 at 06:23:03AM -0500, G. Panula wrote:
> > Current behavior is encrypted packet is handled by ipfw once, then after
> > decryption it is only handled by ipfw(again) if it passes thru an
> > interface didn't arrive on.
>
> Does this apply to ipfilter as well?
Yes.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: twig les: "Re: How to disable XFree86 and wdm listening ports"
- In reply to: Bill Swingle: "Re: IPSec VPNs: to gif or not to gif"
- Next in thread: Jim Hatfield: "Re: IPSec VPNs: to gif or not to gif"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|