summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJun-ichiro itojun Hagino <itojun@cvs.openbsd.org>2000-03-12 16:50:27 +0000
committerJun-ichiro itojun Hagino <itojun@cvs.openbsd.org>2000-03-12 16:50:27 +0000
commit41a7691c99b19bc573a72051abecbec7884101c6 (patch)
treecbb8ef006f5bf87689619afdf4d15a7e8fe49d20
parent5e514fa422eb8e48f5ebae22bcd0257995eb28f2 (diff)
improve SECURITY section. sync with kame.
-rw-r--r--usr.sbin/faithd/faithd.818
1 files changed, 16 insertions, 2 deletions
diff --git a/usr.sbin/faithd/faithd.8 b/usr.sbin/faithd/faithd.8
index d1795f36614..85cd2b171be 100644
--- a/usr.sbin/faithd/faithd.8
+++ b/usr.sbin/faithd/faithd.8
@@ -1,4 +1,4 @@
-.\" $OpenBSD: faithd.8,v 1.3 2000/02/25 10:25:46 itojun Exp $
+.\" $OpenBSD: faithd.8,v 1.4 2000/03/12 16:50:26 itojun Exp $
.\"
.\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.\" KAME Id: faithd.8,v 1.4 2000/01/22 07:56:48 itojun Exp
+.\" KAME Id: faithd.8,v 1.6 2000/03/12 16:49:34 itojun Exp
.\"
.Dd May 17, 1998
.Dt FAITHD 8
@@ -250,6 +250,20 @@ and other IP-address based authentication, for connections relayed by
.Po
and any other TCP relaying services
.Pc .
+.Pp
+.Nm
+itself does not implement access controls, as
+it intends to implement transparent TCP relay services.
+Administrators are advised to filter packets based on IPv6 address.
+IPv6 destination address can be limited by
+carefully configuring routing entries that points to
+.Xr faith 4 ,
+using
+.Xr route 8 .
+IPv6 source address needs to be filtered by using packet filters.
+Documents listed in
+.Sx SEE ALSO
+have more discussions on this topic.
.\"
.Sh HISTORY
The