f1b1c5da22
page with *all* the permissible values. This should really be spelt ipencap (as /etc/protocols does), but a precedent has already been set by the ipproto array in setkey.c. It would be nice if /etc/protocols was parsed for the upperspec field, but I don't do yacc/lex... This change allows policies that only encrypt the encapsulated packets passing between the endpoints of a gif tunnel. Setting such a policy means that you can still talk directly (and unencrypted) between the public IP numbers with (say) ssh. MFC after: 1 week |
||
|---|---|---|
| .. | ||
| Makefile | ||
| parse.y | ||
| sample.cf | ||
| scriptdump.pl | ||
| setkey.8 | ||
| setkey.c | ||
| test-pfkey.c | ||
| test-policy.c | ||
| token.l | ||
| vchar.h | ||