From owner-cvs-all  Thu May 17  8:30:59 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id DC62937B422; Thu, 17 May 2001 08:30:55 -0700 (PDT)
	(envelope-from brian@FreeBSD.org)
Received: (from brian@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id f4HFUtD77891;
	Thu, 17 May 2001 08:30:55 -0700 (PDT)
	(envelope-from brian)
Message-Id: <200105171530.f4HFUtD77891@freefall.freebsd.org>
From: Brian Somers <brian@FreeBSD.org>
Date: Thu, 17 May 2001 08:30:53 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/usr.sbin/setkey setkey.8 token.l
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

brian       2001/05/17 08:30:53 PDT

  Modified files:
    usr.sbin/setkey      setkey.8 token.l 
  Log:
  Allow ``ip4'' as an ``upperspec'' value, and update the man
  page with *all* the permissible values.
  
  This should really be spelt ipencap (as /etc/protocols does),
  but a precedent has already been set by the ipproto array in
  setkey.c.
  
  It would be nice if /etc/protocols was parsed for the upperspec
  field, but I don't do yacc/lex...
  
  This change allows policies that only encrypt the encapsulated
  packets passing between the endpoints of a gif tunnel.  Setting
  such a policy means that you can still talk directly (and
  unencrypted) between the public IP numbers with (say) ssh.
  
  MFC after:	1 week
  
  Revision  Changes    Path
  1.13      +4 -1      src/usr.sbin/setkey/setkey.8
  1.4       +2 -1      src/usr.sbin/setkey/token.l


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message