NAT before IPSEC - reply packets stuck at enc0

[Muenz, Michael]

Am 21.07.2017 um 13:08 schrieb Andrey V. Elsukov:
>
> With ipfw(4) it should work, at least on FreeBSD. pfsense/opensense have
> their own patches, so I don't know what can be wrong there.
>

I also tried 11.0 and 11.1RC3 vanilla kernels, no luck.
Will build a test setup with the OPNsense devs.

I'm still positive that this can't be a huge issue.

Thanks for your efforts Andrey!


Michael