Am 19.07.2017 um 15:35 schrieb Andrey V. Elsukov:
Check what you will see if you set net.enc.in.ipsec_bpf_mask=3.
You should see the reply two times, the second one should be with
translated address.
Googling around with "nat before ipsec" and freebsd shows many topics
like this.
It seems with 11.0 release there were some significant changes to enc
which made this impossible.
Michael
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
