Re: Problem with IPSEC tunnel mode

[Patrick McHardy <kaber@xxxxxxxxx>]

Herbert Xu wrote:
> On Thu, Apr 21, 2005 at 07:50:19PM -0400, jamal wrote:
>
> > What was the reason there exist a FWD direction in the policies?
>
> You should really ask Alexey about that :) I myself had the same
> question when I first started in this area.  However, since it
> has been present since the very beginning and people are already
> relying on it, we will have to live with it.

I guess it was for performance reasons. A router that only needs
IPsec for management doesn't need to perform policy checks for
forwarded packets, which makes sense too me.

Regards
Patrick