Support for the enc(4) pseudo-interface

Miroslav Lachman 000.fbsd at quip.cz
Tue Mar 21 12:12:17 UTC 2017


Bjoern A. Zeeb wrote on 2017/03/21 12:56:
> On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:
>
>> Hi!
>>
>>>> If you want to filter on it it should work if you add ???device
>>>> enc??? to your
>>>> kernel config. The man page suggests that should then allow you to
>>>> filter IPSec
>>>> traffic on enc0.
>>>
>>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>>
>> Yes, please include enc in the GENERIC kernel.
>
> I thought the entire idea of making ipsec loadable was that we don’t
> have to ship it in the kernel and have it available?

Then sorry for the noise.

Miroslav Lachman


More information about the freebsd-pf mailing list