diff options
author | bz <bz@FreeBSD.org> | 2009-05-23 16:42:38 +0000 |
---|---|---|
committer | bz <bz@FreeBSD.org> | 2009-05-23 16:42:38 +0000 |
commit | 9642ff6e283a56096187f128604a36cf5e445825 (patch) | |
tree | af224eeb2132573550696e499948967fb4a2e0d7 /sys/netipsec/ipsec.h | |
parent | dc84aec17116643eb20765e9bb3f4818bd52e4f4 (diff) | |
download | FreeBSD-src-9642ff6e283a56096187f128604a36cf5e445825.zip FreeBSD-src-9642ff6e283a56096187f128604a36cf5e445825.tar.gz |
Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL
kernel option.
This also permits tuning of the option per virtual network stack, as
well as separately per inet, inet6.
The kernel option is left for a transition period, marked deprecated,
and will be removed soon.
Initially requested by: phk (1 year 1 day ago)
MFC after: 4 weeks
Diffstat (limited to 'sys/netipsec/ipsec.h')
-rw-r--r-- | sys/netipsec/ipsec.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netipsec/ipsec.h b/sys/netipsec/ipsec.h index d5e7c157..c869ec8 100644 --- a/sys/netipsec/ipsec.h +++ b/sys/netipsec/ipsec.h @@ -348,6 +348,7 @@ extern int ip4_ah_cleartos; extern int ip4_ah_offsetmask; extern int ip4_ipsec_dfbit; extern int ip4_ipsec_ecn; +extern int ip4_ipsec_filtertunnel; extern int ip4_esp_randpad; extern int crypto_support; |