Date: Thu, 17 May 2001 08:30:53 -0700 (PDT) From: Brian Somers <brian@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/usr.sbin/setkey setkey.8 token.l Message-ID: <200105171530.f4HFUtD77891@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
brian 2001/05/17 08:30:53 PDT
Modified files:
usr.sbin/setkey setkey.8 token.l
Log:
Allow ``ip4'' as an ``upperspec'' value, and update the man
page with *all* the permissible values.
This should really be spelt ipencap (as /etc/protocols does),
but a precedent has already been set by the ipproto array in
setkey.c.
It would be nice if /etc/protocols was parsed for the upperspec
field, but I don't do yacc/lex...
This change allows policies that only encrypt the encapsulated
packets passing between the endpoints of a gif tunnel. Setting
such a policy means that you can still talk directly (and
unencrypted) between the public IP numbers with (say) ssh.
MFC after: 1 week
Revision Changes Path
1.13 +4 -1 src/usr.sbin/setkey/setkey.8
1.4 +2 -1 src/usr.sbin/setkey/token.l
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105171530.f4HFUtD77891>