From b4b3d062cdd5a507afb962caa1fdd9a3d78abf9c Mon Sep 17 00:00:00 2001
From: bz <bz@FreeBSD.org>
Date: Wed, 8 Jun 2011 03:02:11 +0000
Subject: Correct comments and debug logging in ipsec to better match reality.

MFC after:	3 days
---
 sys/netinet/ip_ipsec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'sys/netinet/ip_ipsec.c')

diff --git a/sys/netinet/ip_ipsec.c b/sys/netinet/ip_ipsec.c
index 50a6ce4..a3c87f5 100644
--- a/sys/netinet/ip_ipsec.c
+++ b/sys/netinet/ip_ipsec.c
@@ -95,7 +95,7 @@ ip_ipsec_filtertunnel(struct mbuf *m)
 #if defined(IPSEC)
 
 	/*
-	 * Bypass packet filtering for packets from a tunnel.
+	 * Bypass packet filtering for packets previously handled by IPsec.
 	 */
 	if (!V_ip4_ipsec_filtertunnel &&
 	    m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
-- 
cgit v1.1