cvs commit: doc/en_US.ISO8859-1/books/handbook/security chapter.sgml
Giorgos Keramidas
keramida at FreeBSD.org
Mon Jun 26 13:06:25 UTC 2006
keramida 2006-06-26 13:06:22 UTC
FreeBSD doc repository
Modified files:
en_US.ISO8859-1/books/handbook/security chapter.sgml
Log:
When IPSEC is configured according to the Handbook[1], pf fails
to track connection state properly, because it does not see
packets coming from the tunneled interface to gif(4). Rebuilding
with IPSEC_FILTERGIF fixes the problem.
According to mlaier@ we cannot change GENERIC for this, but it's
ok to document the requirement for IPSEC_FILTERGIF. Add a note
to this effect.
[1] http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html
PR: kern/97057
Submitted by: Dmitry Andrianov <freebsd at dima.spb.ru>
Suggested by: mlaier
Reviewed by: remko
Revision Changes Path
1.296 +10 -0 doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml
More information about the cvs-doc
mailing list