Support for the enc(4) pseudo-interface

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Tue Mar 21 11:56:32 UTC 2017


On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:

> Hi!
>
>>> If you want to filter on it it should work if you add ???device 
>>> enc??? to your
>>> kernel config. The man page suggests that should then allow you to
>>> filter IPSec
>>> traffic on enc0.
>>
>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>
> Yes, please include enc in the GENERIC kernel.

I thought the entire idea of making ipsec loadable was that we don’t 
have to ship it in the kernel and have it available?

/bz


More information about the freebsd-pf mailing list