>Number: 185876 >Category: kern >Synopsis: ipfw not matching incoming packets decapsulating ipsec. >example l2tp/ipsec >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Jan 19 05:50:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: Alexander >Release: Freebsd 10.0 >Organization: itm holding >Environment: FreeBSD evridika.solaris.local 10.0-RELEASE FreeBSD 10.0-RELEASE #0 d44ce30(releng/10.0): Sun Jan 19 11:05:14 YEKT 2014 root@evridika.solaris.local:/usr/obj/usr/src/sys/solaris.v10.0d amd64 >Description: mpd connect work vpn l2tp/ipsec daemon ike: strongswan vpn connected and fine work, but if matching ipfw rule: ipfw add allow ip from any to $me_ip_vpn_address then not work, not matching. It problem if strongswan use for ike2 vpn and do ipfw nat: ipfw nat 1 ip from $virtual_ip to any
In releng/9.2 this work fine >How-To-Repeat: ipfw matching incoming packets decapsulating ipsec on releneg/10.0 >Fix: unknow >Release-Note: >Audit-Trail: >Unformatted: _______________________________________________ freebsd-bugs@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
