Hi! > I'm building a setup for incoming L2TP over IPsec connections > using FreeBSD 8.2-REL. > > IPsec based on ports/security/ipsec-tools, the l2tp part > works from net/mpd5/. > > If I disable the PF rules, everything works. > > If I enable the PF rules, the IPsec connection still comes up, > but the L2TP requests are lost somewhere in the PF rules 8-( > > Interestingly, tcpdump enc0 does not see any encrypted packets (!) > as long as the PF rules are active. > > Any hints on the PF rules required to allow those packets in ?
Turns out: ESP in/out was missing. set debug misc in the pf.conf is worth a lot 8-) Thanks for all help (by private mail). I'll try to document this setup on some webpage (but this will take 1-2 month due to other projects 8-( -- p...@opsec.eu +49 171 3101372 9 years to go ! _______________________________________________ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
