Strongswan problem (used to work for client NAT to the Internet, no longer does)

Sun Mar 23 15:57:37 UTC 2014

On 3/23/2014 12:01 AM, Karl Denninger wrote:
>
> On 3/22/2014 5:44 PM, Karl Denninger wrote:
>> FreeBSD-STABLE 10 r263037M
>>
>>
>> It *looks* like anything coming in through IPSEC and being decoded in 
>> there never goes through the ipfw chain at all.....
>>
> This may be addressed by PR185876.... checking.
>
Or not....

Now the packets just disappear entirely.  Still investigating....

-- 
-- Karl
karl at denninger.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2711 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20140323/1e0dbef6/attachment.bin>