Date: Sun, 23 Feb 2003 09:45:29 -0800 (PST) From: Sam Leffler <sam@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/conf options src/sys/netinet ip_input.c src/sys/i386/conf LINT Message-ID: <200302231745.h1NHjTut086153@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
sam 2003/02/23 09:45:29 PST
Modified files: (Branch: RELENG_4)
sys/conf options
sys/netinet ip_input.c
sys/i386/conf LINT
Log:
MFC: IPSEC_FILTERGIF config option
Add a new config option IPSEC_FILTERGIF to control whether or not
packets coming out of a GIF tunnel are re-processed by ipfw, et. al.
By default they are not reprocessed. With the option they are.
This reverts 1.214. Prior to that change packets were not re-processed.
After they were which caused problems because packets do not have
distinguishing characteristics (like a special network if) that allows
them to be filtered specially.
PR: 48159
Reviewed by: Guido van Rooij <guido@gvr.org>
Approved by: re (jhb, murray)
Revision Changes Path
1.191.2.47 +1 -0 src/sys/conf/options
1.749.2.136 +11 -0 src/sys/i386/conf/LINT
1.130.2.48 +7 -0 src/sys/netinet/ip_input.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200302231745.h1NHjTut086153>