[Bug 201581] regression: ipsec not working

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201581

--- Comment #1 from emz at norma.perm.ru ---
After investigation I discovered the following:

- now enc0 needs to be up when processing ipsec, if kernel has it
- net.enc.out.ipsec_filter_mask and net.enc.in.ipsec_filter_mask default to 1,
so the ipsec packets go through firewall
- (irrelevant, but still an error) I have "set skip on enc0" in pf.rules file,
but upon loading rules I cannot see any occurrences of enc0 in pfctl -vvvs
rules.

-- 
You are receiving this mail because:
You are the assignee for the bug.