summaryrefslogtreecommitdiffstats
path: root/share/man/man4/ipsec.4
diff options
context:
space:
mode:
authorbz <bz@FreeBSD.org>2007-08-05 16:16:15 +0000
committerbz <bz@FreeBSD.org>2007-08-05 16:16:15 +0000
commit3793d89229b35eb423617b68199d0d05bced154b (patch)
tree5dbf6d16651fa5f4766b06925544da591a2f99c8 /share/man/man4/ipsec.4
parent2e613b81275b754323270ba112f9d73a553d837a (diff)
downloadFreeBSD-src-3793d89229b35eb423617b68199d0d05bced154b.zip
FreeBSD-src-3793d89229b35eb423617b68199d0d05bced154b.tar.gz
Rename option IPSEC_FILTERGIF to IPSEC_FILTERTUNNEL.
Also rename the related functions in a similar way. There are no functional changes. For a packet coming in with IPsec tunnel mode, the default is to only call into the firewall with the "outer" IP header and payload. With this option turned on, in addition to the "outer" parts, the "inner" IP header and payload are passed to the firewall too when going through ip_input() the second time. The option was never only related to a gif(4) tunnel within an IPsec tunnel and thus the name was very misleading. Discussed at: BSDCan 2007 Best new name suggested by: rwatson Reviewed by: rwatson Approved by: re (bmah)
Diffstat (limited to 'share/man/man4/ipsec.4')
-rw-r--r--share/man/man4/ipsec.46
1 files changed, 3 insertions, 3 deletions
diff --git a/share/man/man4/ipsec.4 b/share/man/man4/ipsec.4
index 3bfd7bd..4bc45d6 100644
--- a/share/man/man4/ipsec.4
+++ b/share/man/man4/ipsec.4
@@ -29,7 +29,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd August 1, 2007
+.Dd August 5, 2007
.Dt IPSEC 4
.Os
.Sh NAME
@@ -37,7 +37,7 @@
.Nd Internet Protocol Security protocol
.Sh SYNOPSIS
.Cd "options IPSEC"
-.Cd "options IPSEC_FILTERGIF"
+.Cd "options IPSEC_FILTERTUNNEL"
.Cd "device crypto"
.Pp
.In sys/types.h
@@ -89,7 +89,7 @@ inbound.
To properly filter on the inner packets of an
.Nm
tunnel with firewalls, add
-.Cd "options IPSEC_FILTERGIF"
+.Cd "options IPSEC_FILTERTUNNEL"
to the kernel configuration file.
.\"
.Ss Kernel interface
OpenPOWER on IntegriCloud