From owner-cvs-src@FreeBSD.ORG Tue Jun 27 05:22:35 2006 Return-Path: X-Original-To: cvs-src@FreeBSD.org Delivered-To: cvs-src@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED10E16A4A0 for ; Tue, 27 Jun 2006 05:22:35 +0000 (UTC) (envelope-from csjp@FreeBSD.org) Received: from ems01.seccuris.com (ems01.seccuris.com [204.112.0.35]) by mx1.FreeBSD.org (Postfix) with SMTP id 57C4C43DBA for ; Tue, 27 Jun 2006 04:00:14 +0000 (GMT) (envelope-from csjp@FreeBSD.org) Received: (qmail 37848 invoked by uid 86); 27 Jun 2006 04:37:25 -0000 Received: from unknown (HELO ?127.0.0.1?) (204.112.0.37) by ems01.seccuris.com with SMTP; 27 Jun 2006 04:37:25 -0000 Message-ID: <44A0AD4C.2060206@FreeBSD.org> Date: Mon, 26 Jun 2006 23:00:12 -0500 From: "Christian S.J. Peron" User-Agent: Thunderbird 1.5.0.4 (Macintosh/20060530) MIME-Version: 1.0 To: Andrew Thompson References: <200606262230.k5QMU81P042416@repoman.freebsd.org> In-Reply-To: <200606262230.k5QMU81P042416@repoman.freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/share/man/man4 enc.4 fast_ipsec.4 src/sys/conf files options src/sys/net if_enc.c if_types.h src/sys/netipsec ipsec.h ipsec_input.c ipsec_output.c xform_ipip.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Jun 2006 05:22:36 -0000 Thanks for doing this! Andrew Thompson wrote: > thompsa 2006-06-26 22:30:08 UTC > > FreeBSD src repository > > Modified files: > share/man/man4 fast_ipsec.4 > sys/conf files options > sys/net if_types.h > sys/netipsec ipsec.h ipsec_input.c ipsec_output.c > xform_ipip.c > Added files: > share/man/man4 enc.4 > sys/net if_enc.c > Log: > Add a pseudo interface for packet filtering IPSec connections before or after > encryption. There are two functions, a bpf tap which has a basic header with > the SPI number which our current tcpdump knows how to display, and handoff to > pfil(9) for packet filtering. > > Obtained from: OpenBSD > Based on: kern/94829 > No objections: arch, net > MFC after: 1 month > > Revision Changes Path > 1.1 +82 -0 src/share/man/man4/enc.4 (new) > 1.4 +6 -0 src/share/man/man4/fast_ipsec.4 > 1.1126 +1 -0 src/sys/conf/files > 1.549 +1 -0 src/sys/conf/options > 1.1 +323 -0 src/sys/net/if_enc.c (new) > 1.22 +1 -0 src/sys/net/if_types.h > 1.12 +2 -0 src/sys/netipsec/ipsec.h > 1.12 +13 -0 src/sys/netipsec/ipsec_input.c > 1.12 +13 -0 src/sys/netipsec/ipsec_output.c > 1.13 +7 -0 src/sys/netipsec/xform_ipip.c > > > -- Christian S.J. Peron csjp@FreeBSD.ORG FreeBSD Committer FreeBSD Security Team