summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorTheo de Raadt <deraadt@cvs.openbsd.org>2001-08-07 14:07:48 +0000
committerTheo de Raadt <deraadt@cvs.openbsd.org>2001-08-07 14:07:48 +0000
commit9a66b01e77da1600da7f9dedd48e8440a8f0acd0 (patch)
tree5dc19fc598981d7ae93197e9767c1337c08a89bf /etc
parent8fdabbbb3eddb261b776f090b97d6f9d24ffad06 (diff)
enable ah & esp by default, now that we trust the code more
Diffstat (limited to 'etc')
-rw-r--r--etc/sysctl.conf7
1 files changed, 4 insertions, 3 deletions
diff --git a/etc/sysctl.conf b/etc/sysctl.conf
index 444fd703a5d..c7639c3b490 100644
--- a/etc/sysctl.conf
+++ b/etc/sysctl.conf
@@ -1,4 +1,4 @@
-# $OpenBSD: sysctl.conf,v 1.23 2001/06/27 03:20:20 angelos Exp $
+# $OpenBSD: sysctl.conf,v 1.24 2001/08/07 14:07:47 deraadt Exp $
#
# This file contains a list of sysctl options the user wants set at
# boot time. See sysctl(3) and sysctl(8) for more information on
@@ -8,8 +8,9 @@
#net.inet6.ip6.forwarding=1 # 1=Permit forwarding (routing) of packets
#net.inet6.ip6.accept_rtadv=1 # 1=Permit IPv6 autoconf (forwarding must be 0)
#net.inet.tcp.rfc1323=0 # 0=disable TCP RFC1323 extensions (for if tcp is slow)
-#net.inet.esp.enable=1 # 1=Enable the ESP IPsec protocol
-#net.inet.ah.enable=1 # 1=Enable the AH IPsec protocol
+#net.inet.esp.enable=0 # 0=Disable the ESP IPsec protocol
+#net.inet.ah.enable=0 # 0=Disable the AH IPsec protocol
+#net.inet.ipcomp.enable=1 # 1=Enable the IPCOMP protocol
#ddb.panic=0 # 0=Do not drop into ddb on a kernel panic
#ddb.console=1 # 1=Permit entry of ddb from the console
#fs.posix.setuid=0 # 0=Traditional BSD chown() semantics