Re: linux-ipsec: IPSec Masquerade

> > The only real support that's lacking is a more general "-P" option on
> > ipfwadm, so that we could write ipfwadm rules applying specifically to ESP
> > packets (and AH too, please...
>
> This would be useful, but as I understand it, someone (HS?) has already

Correct (and yes, that was me). So a fix is going to require interface changes, and alterations to the code on both user and kernel sides, making it a significant amount of work. It would be worth doing, but it's not simple, alas.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)