Is there any remedy expected before 4.8 release for the situation with ipsec & ipfw interaction that was created after 'ip_input.c 1.130.2.40, MFC: 1.214' ?
The reason I am asking this question with such a big crosspost is that it seems that all previous discussions on this topic resulted in nothing. And this change definetely breaks things for those who use ipsec without extra stuff like gif tunnels. It definetely doesn't look like a kind of change welcomed in -stable branch, not mentioning a potential security vulnaribity for those who can not use gif. I apologize in the case I have missed any latest developments in this area. -- Andriy Gapon To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
