brian 8ed702383f Allow `ip4'' as an `upperspec'' value, and update the man
page with *all* the permissible values.

This should really be spelt ipencap (as /etc/protocols does),
but a precedent has already been set by the ipproto array in
setkey.c.

It would be nice if /etc/protocols was parsed for the upperspec
field, but I don't do yacc/lex...

This change allows policies that only encrypt the encapsulated
packets passing between the endpoints of a gif tunnel.  Setting
such a policy means that you can still talk directly (and
unencrypted) between the public IP numbers with (say) ssh.

MFC after:	1 week
2001-05-17 15:30:49 +00:00
..
2001-04-07 11:21:35 +00:00
2001-04-19 01:39:27 +00:00
2001-04-08 18:41:22 +00:00
2001-04-08 18:41:22 +00:00
2001-05-07 07:42:56 +00:00
2001-04-18 15:54:10 +00:00
2001-04-04 08:42:40 +00:00
2001-04-18 15:54:10 +00:00
2001-04-18 15:54:10 +00:00
2001-04-24 10:26:00 +00:00
2001-04-07 11:21:35 +00:00
2001-04-18 15:54:10 +00:00
2001-04-10 16:29:41 +00:00
2001-04-27 10:32:48 +00:00
2001-03-19 07:59:38 +00:00