Re: IPsec / ipfw interaction in 4.7-STABLE: a proposed change

[Lars Eggert]

On 1/3/2003 2:04 AM, Pekka Nikander wrote:

Well, IMHO the best way would be to have a separate interface
for each tunnel end point.  That would allow most fine grained
control, and would be easiest to understand.

Take a look at the draft-touch-ipsec-vpn-04.txt ID ; if you can use the approach we describe there (IPIP tunnels + IPsec transport mode), you get this functionality free, because rcvif will be the IPIP tunnel a packet came in on.

Lars
--
Lars Eggert <[EMAIL PROTECTED]> USC Information Sciences Institute

smime.p7s

Description: S/MIME Cryptographic Signature