d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Correct a misleading comment regarding the IPSEC_FILTERGIF option.

Browse Source 
PR:		57125
Requested by:	Adrian Steinmann
This commit is contained in:
Bruce M Simpson 2004-06-22 22:02:57 +00:00
parent becfd988a3
commit fa43ee09d4
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=130944
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/conf/NOTES
View File

@ -372,9 +372,8 @@ options IPSEC_DEBUG #debug for IP security
# The default is that packets coming from a tunnel are _not_ processed;
# they are assumed trusted.
#
# Note that enabling this can be problematic as there are no mechanisms
# in place for distinguishing packets coming out of a tunnel (e.g. no
# encX devices as found on openbsd).
# IPSEC history is preserved for such packets, and can be filtered
# using ipfw(8)'s 'ipsec' keyword, when this option is enabled.
#
#options IPSEC_FILTERGIF #filter ipsec packets from a tunnel