Re: gif(4) and bpf(4)

From: Alex (ach_at_meta-x.org)
Date: 01/25/05

  • Next message: Darcy Buskermolen: "ng_nat revisited" 
    Date: Tue, 25 Jan 2005 17:26:18 +0100
To: Jeremie Le Hen <jeremie@le-hen.org>

    Hello,

    Since we see ESP traffic directly on the ep0 interface, packets are not
    going through gif0 as stated in the routing table. IPsec SPD is
    overriding the routing table, can you check (provide us) with setkey
    -DP and setkey -D if no SPD is present from your net to 192.168.4.0/24
    ?

    Regards, Alex.

    > Yes they are (network on the other side of the tunnel is
    > 192.168.4.0/24) :
    > %%%
    > yoda:tools# netstat -rnf inet
    > Routing tables
    >
    > Internet:
    > Destination Gateway Flags Refs Use Netif
    > Expire
    > default <hidden gw> UGSc 24 17513460 ep0
    > [...]
    > 192.168.4 192.168.4.13 UGSc 0 691911 gif0
    > 192.168.4.13 192.168.1.1 UH 3 6949 gif0

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Darcy Buskermolen: "ng_nat revisited"