Re: [freebsd] IPsec VPN and NAT

Tue, 28 Apr 2015 02:00:07 -0700 

On 28.04.2015 11:39, Golub Mikhail wrote:
> Ситуация не изменилась.
> 11:38:04.901422 (authentic,confidential): SPI 0xc2e51929: IP 10.7.0.12 >
> 10.7.0.41: IP 192.168.44.1 > 192.168.58.1: ICMP echo request, id 65250, seq
> 0, length 64 (ipip-proto-4)
> 11:38:05.903056 (authentic,confidential): SPI 0xc2e51929: IP 10.7.0.12 >
> 10.7.0.41: IP 192.168.44.1 > 192.168.58.1: ICMP echo request, id 65250, seq
> 1, length 64 (ipip-proto-4)
> 11:38:06.913052 (authentic,confidential): SPI 0xc2e51929: IP 10.7.0.12 >
> 10.7.0.41: IP 192.168.44.1 > 192.168.58.1: ICMP echo request, id 65250, seq
> 2, length 64 (ipip-proto-4)
> 11:38:07.933118 (authentic,confidential): SPI 0xc2e51929: IP 10.7.0.12 >
> 10.7.0.41: IP 192.168.44.1 > 192.168.58.1: ICMP echo request, id 65250, seq
> 3, length 64 (ipip-proto-4)

А можете ещё сделать bpf_mask=3 для входящих пакетов? Для каждого
входящего пакета тогда будет по две записи.

-- 
WBR, Andrey V. Elsukov

Attachment: signature.asc
Description: OpenPGP digital signature

Ответить