page with *all* the permissible values. This should really be spelt ipencap (as /etc/protocols does), but a precedent has already been set by the ipproto array in setkey.c. It would be nice if /etc/protocols was parsed for the upperspec field, but I don't do yacc/lex... This change allows policies that only encrypt the encapsulated packets passing between the endpoints of a gif tunnel. Setting such a policy means that you can still talk directly (and unencrypted) between the public IP numbers with (say) ssh. MFC after: 1 week |
||
---|---|---|
.. | ||
Makefile | ||
parse.y | ||
sample.cf | ||
scriptdump.pl | ||
setkey.8 | ||
setkey.c | ||
test-pfkey.c | ||
test-policy.c | ||
token.l | ||
vchar.h |