Date: Sun, 23 Feb 2014 13:40:02 GMT From: Nicolas DEFFAYET <nicolas@deffayet.com> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/186755: ipsec tunnels don't work with pf or ipfw Message-ID: <201402231340.s1NDe28t091175@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/186755; it has been noted by GNATS. From: Nicolas DEFFAYET <nicolas@deffayet.com> To: bug-followup@FreeBSD.org, ben@desync.com, andre@freebsd.org Cc: Subject: Re: kern/186755: ipsec tunnels don't work with pf or ipfw Date: Sun, 23 Feb 2014 14:34:00 +0100 After very long testing, i have discovered the route cause. The revision 254519 break the firewall with IPsec. http://svnweb.freebsd.org/base?view=revision&revision=254519 "Move the global M_SKIP_FIREWALL mbuf flags to a protocol layer specific flag instead. The flag is only used within the IP and IPv6 layer 3 protocols. Because some firewall packages treat IPv4 and IPv6 packets the same the flag should have the same value for both." It seem that some code doesn't have been updated for allow firewall to work with IPsec. -- Nicolas DEFFAYET
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201402231340.s1NDe28t091175>