RE: [m0n0wall] filtering VPN traffic

From:	Manuel Kasper <mk at neon1 dot net>
To:	JHead <joggelichopf at hotmail dot com>
Cc:	m0n0wall at lists dot m0n0 dot ch
Subject:	RE: [m0n0wall] filtering VPN traffic
Date:	Wed, 10 Mar 2004 12:19:40 +0100

On 10.03.2004 08:31 +0100, JHead wrote:

> I just join the group of people who would like to filtert the VPN 
> traffic.
> Obviously its by design not possible, isn't it?

No - the way IPsec and ipfilter interact in FreeBSD makes it
infeasible to filter traffic from/to VPN tunnels in a secure way.

- Manuel