summaryrefslogtreecommitdiffstats
path: root/share/man/man4/ipsec.4
Commit message (Collapse)AuthorAgeFilesLines
* Rename option IPSEC_FILTERGIF to IPSEC_FILTERTUNNEL.bz2007-08-051-3/+3
| | | | | | | | | | | | | | | | | | | | | Also rename the related functions in a similar way. There are no functional changes. For a packet coming in with IPsec tunnel mode, the default is to only call into the firewall with the "outer" IP header and payload. With this option turned on, in addition to the "outer" parts, the "inner" IP header and payload are passed to the firewall too when going through ip_input() the second time. The option was never only related to a gif(4) tunnel within an IPsec tunnel and thus the name was very misleading. Discussed at: BSDCan 2007 Best new name suggested by: rwatson Reviewed by: rwatson Approved by: re (bmah)
* Remove the last entries to fast_ipsec.bz2007-08-021-30/+102
| | | | | | | | Merge in parts of the old fast_ipsec.4 man page to ipsec.4 and start updating ipsec.4 man page. Reviewed by: brueffer, sam (slightly earlier versions), bmah Approved by: re (bmah)
* Markup fixes.ru2006-09-181-18/+28
|
* - add note about IPSEC_FILTERGIF to fast_ipsec(4) and let the users knowdanger2006-08-241-1/+6
| | | | | | | | | that it is not possible to use Fast IPsec in conjuction with KAME IPsec - add available kernel options to ipsec(4) - add reference for fast_ipsec(4) to ipsec(4) Reviewed by: trhodes (mentor), keramida (mentor) Approved by: keramida (mentor)
* A little extra cleaning up.gnn2006-02-141-58/+49
| | | | MFC after: 1 week
* Clean up some descriptions and remove ambiguities in the language.gnn2006-02-141-47/+42
| | | | | | Add explanations to the examples. MFC after: 1 week
* Expand contractions.ru2005-02-131-1/+1
|
* Fixed the misplaced $FreeBSD$.ru2005-02-091-1/+2
|
* List RFCs under SEE ALSO.trhodes2005-01-111-1/+13
| | | | PR: 46918
* mdoc(7) police: Use the new .In macro for #include statements.ru2001-10-011-3/+3
|
* mdoc(7) police:ru2001-08-071-21/+15
| | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
* mdoc(7) police: remove extraneous .Pp before and/or after .Sh.dd2001-07-091-1/+0
|
* clarify problem with inbound AH.ume2001-06-271-7/+18
| | | | | | | | | | spdadd A B -P in ipsec esp/tunnel/C-D/use ah/tunnel/C-D/require; does not work due to 1-bit validation bit we are using with inbound policy checking. Submitted by: itojun Obtained from: KAME MFC after: 1 week
* Sync with recent KAME.ume2001-06-111-2/+2
| | | | | | | | | | | | | | | | | | This work was based on kame-20010528-freebsd43-snap.tgz and some critical problem after the snap was out were fixed. There are many many changes since last KAME merge. TODO: - The definitions of SADB_* in sys/net/pfkeyv2.h are still different from RFC2407/IANA assignment because of binary compatibility issue. It should be fixed under 5-CURRENT. - ip6po_m member of struct ip6_pktopts is no longer used. But, it is still there because of binary compatibility issue. It should be removed under 5-CURRENT. Reviewed by: itojun Obtained from: KAME MFC after: 3 weeks
* Correct cross-references:sobomax2001-06-051-2/+2
| | | | | | | | setsockopt.3 --> setsockopt.2 syslog.8 --> syslogd.8 tcpdump.8 --> tcpdump.1 MFC after: 1 week
* Prepare for mdoc(7)NG.ru2000-12-291-21/+21
|
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-1/+1
|
* bring in latest kame doc. talk about ah tunnel caveat.itojun2000-07-171-14/+100
|
* Remove references to man pages that don't exist.shin2000-03-211-2/+3
| | | | PR: docs/17506
* Merge from KAME. Basically man doc improvement and contents fix.shin2000-03-121-7/+13
| | | | Obtained from: KAME project
* Change .Os macro to an empty one to denote that the KAME files areasmodai2000-01-171-1/+1
| | | | | | not FreeBSD specific. Made happy: sheldonh
* libipsec and IPsec related apps. (and some KAME related man pages)shin2000-01-061-0/+228
Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project
OpenPOWER on IntegriCloud