Hello List,
We are having a strange problem with RELENG_6_1 and ipfilter 4.1.8.
We are running gre tunnels over fast_ipsec tunnels. We have the following
rule in ipf:
pass out proto icmp from any to any keep state
When we ping from the remote end across the ipsec tunnel to the ipsec
local endpoint
address it works fine.
When we ping the local gre endpoint from the remote end ipf blocks the
icmp-reply.
This works with 4.9 and ipfilter 3.4.31.
We can work around this by disabling the ipf rule - but is anyone
else experiencing problems with ipfilter 4.1.8?
Thanks,
Steve
--
"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety." (Ben Franklin)
"The course of history shows that as a government grows, liberty
decreases." (Thomas Jefferson)
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
