On Sun, Dec 11, 2016 at 02:33:43PM +0300, Andrey V. Elsukov wrote: > On 11.12.2016 12:13, Eugene Grosbein wrote: > > 11.12.2016 6:07, Andrey V. Elsukov пишет: > > > >> * use transport mode IPsec for forwarded IPv4 packets now unsupported. > >> This matches the IPv6 behavior, and since we can handle the replies, I > >> think it is useless. > > > > Does it include a case of packets going from LAN and forwarded into > > gif(4) tunnel > > connected to remote IPSEC gateway and encrypted with transport mode? > > > > That is, will this configuration break? > > No. An encapsulated by gif(4) packet is considered as own packet. The > described change is related to transport mode policies, that are match > forwarded packets, i.e. when source and destination addresses are not > our own. In this case we can't handle the returned packets.
What difference with source packets? Whu you can handle sourced and can't handle returned packets? _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
