diff options
| author | bms <bms@FreeBSD.org> | 2004-04-20 13:07:53 +0000 |
|---|---|---|
| committer | bms <bms@FreeBSD.org> | 2004-04-20 13:07:53 +0000 |
| commit | 8d080ad0bb416b5e108c2288dc2c60631cea6791 (patch) | |
| tree | 5e506d9119e28787d146e5af489bf4df92c2fb9d /sys/conf | |
| parent | e04e4ea0a9d9c5534c9bc75a715d56a0789e0f01 (diff) | |
| download | FreeBSD-src-8d080ad0bb416b5e108c2288dc2c60631cea6791.zip FreeBSD-src-8d080ad0bb416b5e108c2288dc2c60631cea6791.tar.gz | |
Braino. Point out that TCP_SIGNATURE requires FAST_IPSEC et al.
Diffstat (limited to 'sys/conf')
| -rw-r--r-- | sys/conf/NOTES | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 4dbe4a7..2b5375c 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -622,6 +622,8 @@ options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN # carried in TCP option 19. This option is commonly used to protect # TCP sessions (e.g. BGP) where IPSEC is not available nor desirable. # This is enabled on a per-socket basis using the TCP_MD5SIG socket option. +# This requires the use of 'device crypto', 'options FAST_IPSEC', and +# 'device cryptodev' as it depends on the non-KAME IPSEC SADB code. #options TCP_SIGNATURE #include support for RFC 2385 # DUMMYNET enables the "dummynet" bandwidth limiter. You need |
