Am 02.03.2018 um 14:56 schrieb David Woodhouse: > On Thu, 2018-03-01 at 12:26 +0100, Muenz, Michael wrote: >> Thanks for your quick reply! Renaming of interfaces is no problem, I >> already wrote a plugin for OpenConnect as client. > Ah, want to figure out the underlying ioctl() call and make OpenConnect > work with '--interface=foobar' on FreeBSD then? > > What does the 'ifconfig ocvpn0 group ocvpn' do? It puts multiple interfaces to a group so you can setup specific firewall rules for type OpenConnect. This is just related to OPNsense (probabyl pfSense too), would be nice to have so I'd save some scripting. Thanks Michael
