Thought this might be of interest.

I thought I understood from discussion on this list and elsewhere that
FreeBSD wouldn't filter IPSec traffic.

According to this note, and the related material I understand it can be done
with ip_fw2, so if we can't do it in mono then it has to do with the
filtering mechanism of choice?

We are on the latest 4 series, so I would assume this applies?

m/

-----Original Message-----
From: owner dash freebsd dash net at freebsd dot org
[mailto:owner dash freebsd dash net at freebsd dot org]On Behalf Of Andre Oppermann
Sent: Monday, June 28, 2004 3:10 PM
To: seraf at 2600 dot com; andre at FreeBSD dot org; net at FreeBSD dot org
Subject: Re: kern/23400: IPsec transport mode precludes filtering
onunderlying transport header


Synopsis: IPsec transport mode precludes filtering on underlying transport
header

State-Changed-From-To: open->closed
State-Changed-By: andre
State-Changed-When: Mon Jun 28 22:07:07 GMT 2004
State-Changed-Why:
The functionality requested has been implemented in ip_fw2 and is
available to 4-STABLE users as kernel compile time option.

http://www.freebsd.org/cgi/query-pr.cgi?pr=23400
_______________________________________________
freebsd dash net at freebsd dot org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd dash net dash unsubscribe at freebsd dot org"