Bjoern A. Zeeb wrote on 2017/03/21 12:56:
On 21 Mar 2017, at 11:46, Kurt Jaeger wrote:

Hi!

If you want to filter on it it should work if you add ???device
enc??? to your
kernel config. The man page suggests that should then allow you to
filter IPSec
traffic on enc0.

Shouldn't it be included in GENERIC if IPSec is now part of it?

Yes, please include enc in the GENERIC kernel.

I thought the entire idea of making ipsec loadable was that we don’t
have to ship it in the kernel and have it available?

Then sorry for the noise.

Miroslav Lachman
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"

Reply via email to