From owner-cvs-all@FreeBSD.ORG  Mon Dec  1 16:23:46 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D2CDF16A4CE; Mon,  1 Dec 2003 16:23:46 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 3C98A43F85; Mon,  1 Dec 2003 16:23:46 -0800 (PST)
	(envelope-from sam@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.9/8.12.9) with ESMTP id hB20NkXJ077726;
	Mon, 1 Dec 2003 16:23:46 -0800 (PST)
	(envelope-from sam@repoman.freebsd.org)
Received: (from sam@localhost)
	by repoman.freebsd.org (8.12.9/8.12.9/Submit) id hB20Nj9p077725;
	Mon, 1 Dec 2003 16:23:45 -0800 (PST)
	(envelope-from sam)
Message-Id: <200312020023.hB20Nj9p077725@repoman.freebsd.org>
From: Sam Leffler <sam@FreeBSD.org>
Date: Mon, 1 Dec 2003 16:23:45 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/netinet ip_fw2.c src/sbin/ipfw ipfw.8
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Dec 2003 00:23:47 -0000

sam         2003/12/01 16:23:45 PST

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_fw2.c 
    sbin/ipfw            ipfw.8 
  Log:
  Include opt_ipsec.h so IPSEC/FAST_IPSEC is defined and the appropriate
  code is compiled in to support the O_IPSEC operator.  Previously no
  support was included and ipsec rules were always matching.  Note that
  we do not return an error when an ipsec rule is added and the kernel
  does not have IPsec support compiled in; this is done intentionally
  but we may want to revisit this (document this in the man page).
  
  PR:             58899
  Submitted by:   Bjoern A. Zeeb
  Approved by:    re (rwatson)
  
  Revision  Changes    Path
  1.134     +8 -1      src/sbin/ipfw/ipfw.8
  1.51      +1 -0      src/sys/netinet/ip_fw2.c