d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

MFC r199947, 199950:

Browse Source 
Enable IPcomp by default.

PR:	kern/123587
This commit is contained in:
bz 2009-12-05 19:25:29 +00:00
parent 1f7b1b46a3
commit 533f1fdf82
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
share/man/man4/ipsec.4
View File

@ -29,7 +29,7 @@
.\" .\"
.\" $FreeBSD$ .\" $FreeBSD$
.\" .\"
.Dd May 23, 2009 .Dd November 29, 2009
.Dt IPSEC 4 .Dt IPSEC 4
.Os .Os
.Sh NAME .Sh NAME
@ -215,7 +215,7 @@ To selectively enable/disable protocols, use
.It Sy "Name Default" .It Sy "Name Default"
.It "net.inet.esp.esp_enable On" .It "net.inet.esp.esp_enable On"
.It "net.inet.ah.ah_enable On" .It "net.inet.ah.ah_enable On"
.It "net.inet.ipcomp.ipcomp_enable Off" .It "net.inet.ipcomp.ipcomp_enable On"
.El .El
.Pp .Pp
In addition the following variables are accessible via In addition the following variables are accessible via
@ -408,6 +408,8 @@ size may alleviate this problem.
.Pp .Pp
The The
.Tn IPcomp .Tn IPcomp
protocol support is currently broken. protocol may occasionally error because of
.Xr zlib 3
problems.
.Pp .Pp
This documentation needs more review. This documentation needs more review.

2
sys/netipsec/xform_ipcomp.c
View File

@ -68,7 +68,7 @@
#include <opencrypto/deflate.h> #include <opencrypto/deflate.h>
#include <opencrypto/xform.h> #include <opencrypto/xform.h>
VNET_DEFINE(int, ipcomp_enable) = 0; VNET_DEFINE(int, ipcomp_enable) = 1;
VNET_DEFINE(struct ipcompstat, ipcompstat); VNET_DEFINE(struct ipcompstat, ipcompstat);
SYSCTL_DECL(_net_inet_ipcomp); SYSCTL_DECL(_net_inet_ipcomp);