Support for the enc(4) pseudo-interface

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Tue Mar 21 13:23:16 UTC 2017


On 21 Mar 2017, at 12:12, Miroslav Lachman wrote:

> Bjoern A. Zeeb wrote on 2017/03/21 12:56:
>> On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:
>>
>>> Hi!
>>>
>>>>> If you want to filter on it it should work if you add ???device
>>>>> enc??? to your
>>>>> kernel config. The man page suggests that should then allow you to
>>>>> filter IPSec
>>>>> traffic on enc0.
>>>>
>>>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>>>
>>> Yes, please include enc in the GENERIC kernel.
>>
>> I thought the entire idea of making ipsec loadable was that we don’t
>> have to ship it in the kernel and have it available?
>
> Then sorry for the noise.

well, it was a question;  Cc:ing ae@

/bz


More information about the freebsd-pf mailing list