1.\" $OpenBSD: enc.4,v 1.22 2006/05/26 08:51:29 jmc Exp $ 2.\" 3.\" Copyright (c) 1999 Angelos D. Keromytis 4.\" All rights reserved. 5.\" 6.\" Redistribution and use in source and binary forms, with or without 7.\" modification, are permitted provided that the following conditions 8.\" are met: 9.\" 10.\" 1. Redistributions of source code must retain the above copyright 11.\" notice, this list of conditions and the following disclaimer. 12.\" 2. Redistributions in binary form must reproduce the above copyright 13.\" notice, this list of conditions and the following disclaimer in the 14.\" documentation and/or other materials provided with the distribution. 15.\" 3. All advertising materials mentioning features or use of this software 16.\" must display the following acknowledgement: 17.\" This product includes software developed by Angelos D. Keromytis. 18.\" 4. The name of the author may not be used to endorse or promote products 19.\" derived from this software without specific prior written permission. 20.\" 21.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 22.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 23.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 24.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 25.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 26.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 27.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 28.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 29.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 30.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 31.\" 32.\" $FreeBSD$ 33.\" 34.Dd June 16, 2006 35.Dt ENC 4 36.Os 37.Sh NAME 38.Nm enc 39.Nd Encapsulating Interface 40.Sh SYNOPSIS 41To compile this driver into the kernel, 42place the following line in your 43kernel configuration file: 44.Bd -ragged -offset indent 45.Cd "device enc" 46.Ed 47.Sh DESCRIPTION 48The 49.Nm 50interface is a software loopback mechanism that allows hosts or 51firewalls to filter 52.Xr fast_ipsec 4 53traffic using any firewall package that hooks in via the 54.Xr pfil 9 55framework. 56.Pp 57The 58.Nm 59interface allows an administrator 60to see outgoing packets before they have been processed by 61.Xr fast_ipsec 4 , 62or incoming packets after they have been similarly processed, via 63.Xr tcpdump 8 . 64.Pp 65The 66.Dq enc0 67interface inherits all IPsec traffic. 68Thus all IPsec traffic can be filtered based on 69.Dq enc0 , 70and all IPsec traffic could be seen by invoking 71.Xr tcpdump 8 72on the 73.Dq enc0 74interface. 75.Sh EXAMPLES 76To see all outgoing packets before they have been processed via 77.Xr fast_ipsec 4 , 78or all incoming packets after they have been similarly processed: 79.Pp 80.Dl # tcpdump -i enc0 81.Sh SEE ALSO 82.Xr tcpdump 1 , 83.Xr bpf 4 , 84.Xr fast_ipsec 4 , 85.Xr ipf 4 , 86.Xr ipfw 4 , 87.Xr pf 4 88