[Bug 242744] IPSec in transport mode between FreeBSD hosts blackholes TCP traffic

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Dec 21 17:41:29 UTC 2019


--- Comment #14 from Victor Sudakov <vas at sibptus.ru> ---
(In reply to Eugene Grosbein from comment #11)
> you can use phase1 up-script to create specific routes

A clever idea. A host route to $REMOTE_ADDR via... via what? Maybe sourcing
rc.conf for $defaultrouter would be sufficient in most cases.

Your idea about ipfw. Can it really match locally created packets not passing
via any interface?

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-net mailing list