From owner-cvs-src  Sun Feb 23  9:45:31 2003
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B45D937B401; Sun, 23 Feb 2003 09:45:29 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 66B3B43FA3; Sun, 23 Feb 2003 09:45:29 -0800 (PST)
	(envelope-from sam@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h1NHjT0U086154;
	Sun, 23 Feb 2003 09:45:29 -0800 (PST)
	(envelope-from sam@repoman.freebsd.org)
Received: (from sam@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h1NHjTut086153;
	Sun, 23 Feb 2003 09:45:29 -0800 (PST)
Message-Id: <200302231745.h1NHjTut086153@repoman.freebsd.org>
From: Sam Leffler <sam@FreeBSD.org>
Date: Sun, 23 Feb 2003 09:45:29 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/conf options src/sys/netinet ip_input.c
         src/sys/i386/conf LINT
X-FreeBSD-CVS-Branch: RELENG_4
Sender: owner-cvs-src@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-src.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-src>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-src>
X-Loop: FreeBSD.ORG

sam         2003/02/23 09:45:29 PST

  Modified files:        (Branch: RELENG_4)
    sys/conf             options 
    sys/netinet          ip_input.c 
    sys/i386/conf        LINT 
  Log:
  MFC: IPSEC_FILTERGIF config option
  
  Add a new config option IPSEC_FILTERGIF to control whether or not
  packets coming out of a GIF tunnel are re-processed by ipfw, et. al.
  By default they are not reprocessed.  With the option they are.
  
  This reverts 1.214.  Prior to that change packets were not re-processed.
  After they were which caused problems because packets do not have
  distinguishing characteristics (like a special network if) that allows
  them to be filtered specially.
  
  PR:             48159
  Reviewed by:    Guido van Rooij <guido@gvr.org>
  Approved by:    re (jhb, murray)
  
  Revision     Changes    Path
  1.191.2.47   +1 -0      src/sys/conf/options
  1.749.2.136  +11 -0     src/sys/i386/conf/LINT
  1.130.2.48   +7 -0      src/sys/netinet/ip_input.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-src" in the body of the message