d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

KAME-IPSEC has already supports TCP_SIGNATURE(IPv4)

Browse Source
This commit is contained in:
SUZUKI Shinsuke 2005-01-11 04:24:17 +00:00
parent 5e4470116c
commit 017bee7424
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=140033
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/conf/NOTES
View File

@ -696,8 +696,8 @@ options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN
# carried in TCP option 19. This option is commonly used to protect
# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
# This requires the use of 'device crypto', 'options FAST_IPSEC', and
# 'device cryptodev' as it depends on the non-KAME IPSEC SADB code.
# This requires the use of 'device crypto', 'options FAST_IPSEC' or 'options
# IPSEC', and 'device cryptodev'.
#options TCP_SIGNATURE #include support for RFC 2385
# DUMMYNET enables the "dummynet" bandwidth limiter. You need IPFIREWALL