Joe Pruett wrote:
Packets in both tunnel and transport mode traverse the netfilter hooks
after decapsulation and before encapsulation. From a users POV there
should be nothing special about it.
i don't see that behaviour on rhel/centos 5 kernels. could this have
changed since 2.6.18? for tunnel mode, it looks to me like the ip-ip
module is what causes traffic to be seen after decrypt/decap, and i just
don't see anything like that for transport mode.
i'll do some more experiments.
IIRC the IPsec support was merged around 2.6.17, but that might be wrong.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
