From owner-cvs-src-old@FreeBSD.ORG Sat May 23 16:48:19 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3E6861065680 for ; Sat, 23 May 2009 16:48:19 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 288798FC16 for ; Sat, 23 May 2009 16:48:19 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4NGmJjB069706 for ; Sat, 23 May 2009 16:48:19 GMT (envelope-from bz@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4NGmJ9w069705 for cvs-src-old@freebsd.org; Sat, 23 May 2009 16:48:19 GMT (envelope-from bz@repoman.freebsd.org) Message-Id: <200905231648.n4NGmJ9w069705@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to bz@repoman.freebsd.org using -f From: "Bjoern A. Zeeb" Date: Sat, 23 May 2009 16:42:38 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/share/man/man4 ipsec.4 src/sys/conf NOTES src/sys/netinet ip_ipsec.c src/sys/netinet6 ip6_ipsec.c src/sys/netipsec ipsec.c ipsec.h ipsec6.h vipsec.h X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 May 2009 16:48:19 -0000 bz 2009-05-23 16:42:38 UTC FreeBSD src repository Modified files: share/man/man4 ipsec.4 sys/conf NOTES sys/netinet ip_ipsec.c sys/netinet6 ip6_ipsec.c sys/netipsec ipsec.c ipsec.h ipsec6.h vipsec.h Log: SVN rev 192648 on 2009-05-23 16:42:38Z by bz Add sysctls to toggle the behaviour of the (former) IPSEC_FILTERTUNNEL kernel option. This also permits tuning of the option per virtual network stack, as well as separately per inet, inet6. The kernel option is left for a transition period, marked deprecated, and will be removed soon. Initially requested by: phk (1 year 1 day ago) MFC after: 4 weeks Revision Changes Path 1.23 +7 -5 src/share/man/man4/ipsec.4 1.1539 +4 -3 src/sys/conf/NOTES 1.18 +9 -2 src/sys/netinet/ip_ipsec.c 1.16 +9 -2 src/sys/netinet6/ip6_ipsec.c 1.50 +16 -0 src/sys/netipsec/ipsec.c 1.24 +1 -0 src/sys/netipsec/ipsec.h 1.8 +1 -0 src/sys/netipsec/ipsec6.h 1.9 +4 -0 src/sys/netipsec/vipsec.h