Support for the enc(4) pseudo-interface
Bjoern A. Zeeb
bzeeb-lists at lists.zabbadoz.net
Tue Mar 21 11:56:32 UTC 2017
On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:
> Hi!
>
>>> If you want to filter on it it should work if you add ???device
>>> enc??? to your
>>> kernel config. The man page suggests that should then allow you to
>>> filter IPSec
>>> traffic on enc0.
>>
>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>
> Yes, please include enc in the GENERIC kernel.
I thought the entire idea of making ipsec loadable was that we don’t
have to ship it in the kernel and have it available?
/bz
More information about the freebsd-pf
mailing list