(review request) ipfw and ipsec processing order foroutgoingpackets

Ari Suutari ari at suutari.iki.fi
Mon Dec 13 02:29:30 PST 2004


Hi,
>
> All I intend to provide is a way to specify whether you want IPSEC before
> or after pfil_hooks.  By default it will be as it is today and work 
> exactly
> the same.

    OK, this sounds like a good step. Maybe the next step could be third 
choice
    like 'both before and after' for us who are perhaps over-concerned about 
security ?

        Ari S. 



More information about the freebsd-net mailing list