[Bug 242744] IPSec in transport mode between FreeBSD hosts blackholes TCP traffic

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Dec 21 17:41:29 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242744

--- Comment #14 from Victor Sudakov <vas at sibptus.ru> ---
(In reply to Eugene Grosbein from comment #11)
> you can use phase1 up-script to create specific routes

A clever idea. A host route to $REMOTE_ADDR via... via what? Maybe sourcing
rc.conf for $defaultrouter would be sufficient in most cases.

Your idea about ipfw. Can it really match locally created packets not passing
via any interface?

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-net mailing list