NAT-T support?
-
I searched, but only found a reference to version 1.0 not supporting it. Does the beta, and will the 1.2 release support NAT-T passthru for IPSEC?
-Robert
-
the kernel support was there, but supposedly had a major security issue so was removed. That's the last I've heard, it hasn't been revisited in a while. It will not be in 1.2, it may be revisited for 1.3.
-
Ugh. Of all the places where NAT-T is needed the most is in a firewall. I can't believe FreeBSD 6.2 still doesn't have this right.
Robert
-
I just saw this on September 12. http://cvstrac.pfsense.com/timeline
Does this mean we have NAT-T support now? :o
-Robert
-
We did, but it wasn't the transparent change we'd hoped for. It broke IPsec, so it was pulled. It's too late in the release cycle to mess with it. 1.2 will not support NAT-T, though it may be added as a package maybe by the end of the year. 1.3 will support it.