From owner-cvs-all  Sat Feb 22 16:47: 9 2003
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id CD9D137B401; Sat, 22 Feb 2003 16:47:07 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 815FF43FAF; Sat, 22 Feb 2003 16:47:07 -0800 (PST)
	(envelope-from sam@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h1N0l70U000261;
	Sat, 22 Feb 2003 16:47:07 -0800 (PST)
	(envelope-from sam@repoman.freebsd.org)
Received: (from sam@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h1N0l7OV000260;
	Sat, 22 Feb 2003 16:47:07 -0800 (PST)
Message-Id: <200302230047.h1N0l7OV000260@repoman.freebsd.org>
From: Sam Leffler <sam@FreeBSD.org>
Date: Sat, 22 Feb 2003 16:47:07 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/netinet ip_input.c src/sys/conf NOTES options
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

sam         2003/02/22 16:47:07 PST

  Modified files:
    sys/netinet          ip_input.c 
    sys/conf             NOTES options 
  Log:
  Add a new config option IPSEC_FILTERGIF to control whether or not
  packets coming out of a GIF tunnel are re-processed by ipfw, et. al.
  By default they are not reprocessed.  With the option they are.
  
  This reverts 1.214.  Prior to that change packets were not re-processed.
  After they were which caused problems because packets do not have
  distinguishing characteristics (like a special network if) that allows
  them to be filtered specially.
  
  This is really a stopgap measure designed for immediate MFC so that
  4.8 has consistent handling to what was in 4.7.
  
  PR:             48159
  Reviewed by:    Guido van Rooij <guido@gvr.org>
  MFC after:      1 day
  
  Revision  Changes    Path
  1.1129    +11 -0     src/sys/conf/NOTES
  1.374     +1 -0      src/sys/conf/options
  1.226     +7 -0      src/sys/netinet/ip_input.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message