[Bug 296598] inbound ipsec packets get tracked via outer ip header when the tunnel runs over if_wg

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296598

--- Comment #3 from Lars Krämer <[email protected]> ---
The states seems to be bound to the enc0/vtnet1 interface during the tests.
For context: vtnet1 is LAN, 192.168.20.0/24 in the test setup.

root@OPNsense:~ # pfctl -vvss
No ALTQ support in kernel
ALTQ related functions disabled
<...>
all tcp 192.168.1.10:5201 <- 192.168.20.60:38242       ESTABLISHED:ESTABLISHED
   [4052195990 + 4294639872] wscale 7  [268115414 + 4294902016] wscale 7
   age 00:00:03, expires in 23:59:57, 7:8 pkts, 537:428 bytes, rule 72
   id: ca2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: vtnet1
all tcp 192.168.20.60:38242 -> 192.168.1.10:5201       SYN_SENT:CLOSED
   [268115414 + 1543438336]  [0 + 4127260672]
   age 00:00:03, expires in 00:00:27, 7:0 pkts, 537:0 bytes, rule 68
   id: cb2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: enc0
all esp <local wg IP> -> <wg peer IP>       MULTIPLE:MULTIPLE
   age 00:00:03, expires in 00:00:57, 59:59 pkts, 73364:7316 bytes, rule 80
   id: cc2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: wg1
all ipencap <local wg IP> <- <wg peer IP>       NO_TRAFFIC:SINGLE
   age 00:00:03, expires in 00:00:27, 59:0 pkts, 4268:0 bytes, rule 67
   id: cd2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: enc0
all tcp 192.168.1.10:5201 <- 192.168.20.60:38256       ESTABLISHED:ESTABLISHED
   [124433020 + 4294639872] wscale 7  [353817828 + 950009856] wscale 7
   age 00:00:03, expires in 24:00:00, 74:51 pkts, 99601:2660 bytes, rule 72
   id: ce2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: vtnet1
all tcp 192.168.20.60:38256 -> 192.168.1.10:5201       SYN_SENT:CLOSED
   [1303892964 + 3623747328]  [0 + 4127260672]
   age 00:00:03, expires in 00:00:27, 52:0 pkts, 68801:0 bytes, rule 68
   id: cf2d4e6a00000000 creatorid: 6ec3bd86 gateway: 0.0.0.0
   origif: enc0

-- 
You are receiving this mail because:
You are the assignee for the bug.