From owner-freebsd-doc@FreeBSD.ORG Sat Oct 20 21:10:01 2012 Return-Path: Delivered-To: freebsd-doc@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1AD329D for ; Sat, 20 Oct 2012 21:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.FreeBSD.org [8.8.178.135]) by mx1.freebsd.org (Postfix) with ESMTP id CBC298FC14 for ; Sat, 20 Oct 2012 21:10:00 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q9KLA0iT028080 for ; Sat, 20 Oct 2012 21:10:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q9KLA0NF028079; Sat, 20 Oct 2012 21:10:00 GMT (envelope-from gnats) Resent-Date: Sat, 20 Oct 2012 21:10:00 GMT Resent-Message-Id: <201210202110.q9KLA0NF028079@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-doc@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "John W. O'Brien" Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C7B547D for ; Sat, 20 Oct 2012 21:09:25 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id B00408FC0C for ; Sat, 20 Oct 2012 21:09:25 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.5/8.14.5) with ESMTP id q9KL9PKf056325 for ; Sat, 20 Oct 2012 21:09:25 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.5/8.14.5/Submit) id q9KL9Pmn056324; Sat, 20 Oct 2012 21:09:25 GMT (envelope-from nobody) Message-Id: <201210202109.q9KL9Pmn056324@red.freebsd.org> Date: Sat, 20 Oct 2012 21:09:25 GMT From: "John W. O'Brien" To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Subject: docs/172913: [ipsec] [patch] setkey(8) is unclear on anti-replay window size option semantics X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2012 21:10:01 -0000 >Number: 172913 >Category: docs >Synopsis: [ipsec] [patch] setkey(8) is unclear on anti-replay window size option semantics >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-doc >State: open >Quarter: >Keywords: >Date-Required: >Class: doc-bug >Submitter-Id: current-users >Arrival-Date: Sat Oct 20 21:10:00 UTC 2012 >Closed-Date: >Last-Modified: >Originator: John W. O'Brien >Release: 9.1-PRERELEASE >Organization: Saltant Solutions >Environment: FreeBSD XXXX.saltant.net 9.1-PRERELEASE FreeBSD 9.1-PRERELEASE #0 r241198: Thu Oct 4 17:24:35 EDT 2012 root@XXXX.saltant.net:/usr/obj/usr/src/sys/NIPPL amd64 >Description: The manpage for setkey(8) does not crisply and unambiguously explain how to choose and specify a value for the -r option. >How-To-Repeat: Read setkey(8) to learn how to specify the anti-replay window size when creating an SA from the command line. >Fix: Apply the attached patch to head/sbin/setkey/setkey.8 Patch attached with submission follows: Index: setkey.8 =================================================================== --- setkey.8 (revision 241789) +++ setkey.8 (working copy) @@ -29,7 +29,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 13, 2006 +.Dd Oct 20, 2012 .Dt SETKEY 8 .Os .\" @@ -289,12 +289,13 @@ .Li any . .\" .It Fl r Ar size -Specify window size of bytes for replay prevention. +Specify the bitmap size in octets of the anti-replay window. .Ar size -must be decimal number in 32-bit word. +is a 32-bit unsigned integer, and its value is one eighth of the +anti-replay window size in packets. If .Ar size -is zero or not specified, replay check does not take place. +is zero or not specified, an anti-replay check does not take place. .\" .It Fl u Ar id Specify the identifier of the policy entry in SPD. >Release-Note: >Audit-Trail: >Unformatted: