Date: Mon, 26 Jun 2006 22:30:08 +0000 (UTC) From: Andrew Thompson <thompsa@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/share/man/man4 enc.4 fast_ipsec.4 src/sys/conf files options src/sys/net if_enc.c if_types.h src/sys/netipsec ipsec.h ipsec_input.c ipsec_output.c xform_ipip.c Message-ID: <200606262230.k5QMU81P042416@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
thompsa 2006-06-26 22:30:08 UTC
FreeBSD src repository
Modified files:
share/man/man4 fast_ipsec.4
sys/conf files options
sys/net if_types.h
sys/netipsec ipsec.h ipsec_input.c ipsec_output.c
xform_ipip.c
Added files:
share/man/man4 enc.4
sys/net if_enc.c
Log:
Add a pseudo interface for packet filtering IPSec connections before or after
encryption. There are two functions, a bpf tap which has a basic header with
the SPI number which our current tcpdump knows how to display, and handoff to
pfil(9) for packet filtering.
Obtained from: OpenBSD
Based on: kern/94829
No objections: arch, net
MFC after: 1 month
Revision Changes Path
1.1 +82 -0 src/share/man/man4/enc.4 (new)
1.4 +6 -0 src/share/man/man4/fast_ipsec.4
1.1126 +1 -0 src/sys/conf/files
1.549 +1 -0 src/sys/conf/options
1.1 +323 -0 src/sys/net/if_enc.c (new)
1.22 +1 -0 src/sys/net/if_types.h
1.12 +2 -0 src/sys/netipsec/ipsec.h
1.12 +13 -0 src/sys/netipsec/ipsec_input.c
1.12 +13 -0 src/sys/netipsec/ipsec_output.c
1.13 +7 -0 src/sys/netipsec/xform_ipip.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606262230.k5QMU81P042416>