which firewall product?

Michael Brown michael at supermathie.net
Tue Jul 30 20:19:34 UTC 2013

In the pfSense UI, you create the physical interface as a GRE tunnel
then assign it to a logical interface against which you can apply the
firewall rules:

The screenshot is a GIF IPv6 he.net tunnel (this is 2.1RC0) but it works
the same way on 2.0.1.

Works great!


On 13-07-30 04:10 PM, Charles N Wyble wrote:
> Not sure how bsd handles ipip connections. If it breaks them out as a dedicated interface (like it does for openvpn connections) , then rules can be applied and pfsense would be quite useful. The UI is very simple. 

Michael Brown            | The true sysadmin does not adjust his behaviour
Systems Administrator    | to fit the machine.  He adjusts the machine
michael at supermathie.net  | until it behaves properly.  With a hammer,
                         | if necessary.  - Brian

More information about the NANOG mailing list