Support for the enc(4) pseudo-interface
Bjoern A. Zeeb
bzeeb-lists at lists.zabbadoz.net
Tue Mar 21 13:23:16 UTC 2017
On 21 Mar 2017, at 12:12, Miroslav Lachman wrote:
> Bjoern A. Zeeb wrote on 2017/03/21 12:56:
>> On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:
>>
>>> Hi!
>>>
>>>>> If you want to filter on it it should work if you add ???device
>>>>> enc??? to your
>>>>> kernel config. The man page suggests that should then allow you to
>>>>> filter IPSec
>>>>> traffic on enc0.
>>>>
>>>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>>>
>>> Yes, please include enc in the GENERIC kernel.
>>
>> I thought the entire idea of making ipsec loadable was that we don’t
>> have to ship it in the kernel and have it available?
>
> Then sorry for the noise.
well, it was a question; Cc:ing ae@
/bz
More information about the freebsd-pf
mailing list