From 9642ff6e283a56096187f128604a36cf5e445825 Mon Sep 17 00:00:00 2001 From: bz Date: Sat, 23 May 2009 16:42:38 +0000 Subject: Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL kernel option. This also permits tuning of the option per virtual network stack, as well as separately per inet, inet6. The kernel option is left for a transition period, marked deprecated, and will be removed soon. Initially requested by: phk (1 year 1 day ago) MFC after: 4 weeks --- sys/netipsec/ipsec6.h | 1 + 1 file changed, 1 insertion(+) (limited to 'sys/netipsec/ipsec6.h') diff --git a/sys/netipsec/ipsec6.h b/sys/netipsec/ipsec6.h index 6612407..2f49463 100644 --- a/sys/netipsec/ipsec6.h +++ b/sys/netipsec/ipsec6.h @@ -47,6 +47,7 @@ extern int ip6_esp_net_deflev; extern int ip6_ah_trans_deflev; extern int ip6_ah_net_deflev; extern int ip6_ipsec_ecn; +extern int ip6_ipsec6_filtertunnel; struct inpcb; -- cgit v1.1