how to configure a FreeBSD firewall to pass IPSec?

[David G. Andersen]

Guy Middleton just mooed:
> I have a FreeBSD box acting as a firewall and NAT gateway
> 
> I would like to set it up to transparently pass IPSec packets -- I have
> an IPSec VPN client running on another machine, connecting to a remote network.
> 
> Is there a way to do this?  I can't find any hints in the man pages.

  It's probably using either ipip, esp, or ipencap.  tcpdump the
traffic, and then permit whichever protocol it's using.

  permit esp from foo to bar

  -Dave

-- 
work: dga at lcs.mit.edu                          me:  dga at pobox.com
      MIT Laboratory for Computer Science           http://www.angio.net/
      I do not accept unsolicited commercial email.  Do not spam me.