Support for the enc(4) pseudo-interface

[Andrey V. Elsukov]

On 21.03.2017 16:23, Bjoern A. Zeeb wrote:
> On 21 Mar 2017, at 12:12, Miroslav Lachman wrote:
> 
>> Bjoern A. Zeeb wrote on 2017/03/21 12:56:
>>> On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:
>>>
>>>> Hi!
>>>>
>>>>>> If you want to filter on it it should work if you add ???device
>>>>>> enc??? to your
>>>>>> kernel config. The man page suggests that should then allow you to
>>>>>> filter IPSec
>>>>>> traffic on enc0.
>>>>>
>>>>> Shouldn't it be included in GENERIC if IPSec is now part of it?
>>>>
>>>> Yes, please include enc in the GENERIC kernel.
>>>
>>> I thought the entire idea of making ipsec loadable was that we don’t
>>> have to ship it in the kernel and have it available?
>>
>> Then sorry for the noise.
> 
> well, it was a question;  Cc:ing ae@

if_enc(4) was made loadable a more than 15 months ago. I don't see the
need to add it into GENERIC.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 553 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20170321/b642f220/attachment.sig>