Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 31 Aug 2004 21:58:29 +0100
From:      "mark" <lumsden@myrealbox.com>
To:        doc@FreeBSD.org
Subject:   ipsec
Message-ID:  <1093985909.d6849c9clumsden@myrealbox.com>

next in thread | raw e-mail | index | archive | help
hi,

Just a small error I think, in the handbook at 14.10.3.2:

``If a packet leaves from A.B.C.D, and that packet is encapsulating another=
 packet, and it is destined for W.X.Y.Z, then encrypt it, using the neces=
sary security associations.''

``If a packet arrives from W.X.Y.Z, and that packet is encapsulating anothe=
r packet, and it is destined for A.B.C.D, then encrypt it, using the nece=
ssary security associations.''

I think the 2 lines above should read:

``If a packet leaves from A.B.C.D, and that packet is encapsulating another=
 packet, and it is destined for W.X.Y.Z, then encrypt it, using the neces=
sary security associations.''

``If a packet arrives from W.X.Y.Z, and that packet is encapsulating anothe=
r packet, and it is destined for A.B.C.D, then _decrypt_ it, using the ne=
cessary security associations.''

The change makes more sense especially when read with these 2 lines found i=
n the handbook (just before the previous ones):

`If a packet leaves from A.B.C.D, and it is destined for W.X.Y.Z, then >enc=
rypt< it, using the necessary security associations.''

``If a packet arrives from W.X.Y.Z, and it is destined for A.B.C.D, then >d=
ecrypt< it, using the necessary security associations.''

Regards
Mark



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1093985909.d6849c9clumsden>