Date: Mon, 26 Jun 2006 13:06:22 +0000 (UTC) From: Giorgos Keramidas <keramida@FreeBSD.org> To: doc-committers@FreeBSD.org, cvs-doc@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: doc/en_US.ISO8859-1/books/handbook/security chapter.sgml Message-ID: <200606261306.k5QD6MxK069792@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
keramida 2006-06-26 13:06:22 UTC
FreeBSD doc repository
Modified files:
en_US.ISO8859-1/books/handbook/security chapter.sgml
Log:
When IPSEC is configured according to the Handbook[1], pf fails
to track connection state properly, because it does not see
packets coming from the tunneled interface to gif(4). Rebuilding
with IPSEC_FILTERGIF fixes the problem.
According to mlaier@ we cannot change GENERIC for this, but it's
ok to document the requirement for IPSEC_FILTERGIF. Add a note
to this effect.
[1] http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html
PR: kern/97057
Submitted by: Dmitry Andrianov <freebsd@dima.spb.ru>
Suggested by: mlaier
Reviewed by: remko
Revision Changes Path
1.296 +10 -0 doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606261306.k5QD6MxK069792>