In the pfSense UI, you create the physical interface as a GRE tunnel then assign it to a logical interface against which you can apply the firewall rules: The screenshot is a GIF IPv6 he.net tunnel (this is 2.1RC0) but it works the same way on 2.0.1. Works great! M. On 13-07-30 04:10 PM, Charles N Wyble wrote:
Not sure how bsd handles ipip connections. If it breaks them out as a dedicated interface (like it does for openvpn connections) , then rules can be applied and pfsense would be quite useful. The UI is very simple.
-- Michael Brown | The true sysadmin does not adjust his behaviour Systems Administrator | to fit the machine. He adjusts the machine michael@supermathie.net | until it behaves properly. With a hammer, | if necessary. - Brian