Hello everybody.
I would like to do some kind of shaping inside an
ipsec tunnel implemented by Openswan and linux
2.6.18.x with xfrm (no KLIPS): for example, to
limit outbound smtp traffic inside the tunnel.
Question: where should I attach the qdisc to? Eth0?
I'm asking this, because tcpdump only see the ESP
packet on the eth0 and not the 'clear' packet.
TIA
This is my simple network schema:
____ private lan A
/
|
|eth1
+---+----+
| |
| 2.6.18 |
|openswan| Ipsec gateway
| |
+---+----+
|eth0
|
I|
P|i
S|n
E|t
C|e
|r
T|n
U|e
N|t
N|
E|
L|eth0
+---+----+
| |
| 2.6.18 |
|openswan| Ipsec gateway
| |
+---+----+
|eth1
|
\____ private lan B
_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
