logo       

Re: port-based filtering of ESP packets with in-kernel IPsec?: msg#00689

Subject: Re: port-based filtering of ESP packets with in-kernel IPsec?
On Wed, 2003-07-30 at 08:51, Andreas Jellinghaus wrote:
> [netfilter]
> incoming encrypted packets are seen as ESP/AH in INPUT
> and then as decrypted packet in INPUT or FORWARD.

Just to clarify, the packets will travel INPUT *twice* (once as ESP and
then in the clear)?





<Prev in Thread] Current Thread [Next in Thread>